kb-github-scanning
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external content from GitHub, which is a source of untrusted data.
- Ingestion points: Reads data from GitHub search results (issues, PRs, discussions) and local configuration in
.github/agents/preferences.md. - Boundary markers: The instructions do not provide specific boundary markers or instructions to ignore embedded commands within the fetched GitHub data.
- Capability inventory: The skill facilitates GitHub search and lookup tasks; no dangerous capabilities like arbitrary command execution or local file writing are present.
- Sanitization: There are no instructions for sanitizing or escaping the content retrieved from GitHub before the agent processes it.
Audit Metadata