projects-manager
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) and GraphQL mutations to manage project boards, items, and fields. This is consistent with its stated purpose of providing a text-based alternative to the GitHub web UI. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from GitHub Projects, such as item titles and descriptions, which are external ingestion points.
- Ingestion points: Data retrieved via the GitHub GraphQL API as described in the Core Capabilities section of SKILL.md.
- Boundary markers: None identified in the instructions for delimiting untrusted item content.
- Capability inventory: Uses the
ghcommand-line tool for API interactions and state changes (mutations) as specified in the Workflow section. - Sanitization: No specific sanitization or filtering of item content is mentioned.
Audit Metadata