repo-manager
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gh(GitHub CLI) tool to automate repository management tasks, including the creation of issues, labels, and releases based on codebase analysis.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository which could theoretically contain malicious instructions designed to influence agent behavior. - Ingestion points: Reads commit messages from the repository's history to generate changelogs and scans source code files for
TODOcomments to seed 'Good First Issues'. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when reading commit history or source code comments.
- Capability inventory: The agent has the ability to write to the repository's filesystem and interact with the GitHub API via the CLI.
- Sanitization: Risks are mitigated by behavioral rules requiring the agent to preview all generated content and obtain explicit user confirmation before overwriting or creating files.
Audit Metadata