github
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes content from GitHub (such as issue titles, PR descriptions, and workflow logs) which may contain untrusted data, creating a surface for indirect prompt injection.
- Ingestion points: Command outputs from
gh pr,gh issue,gh run, andgh apiare ingested into the agent context. - Boundary markers: The instructions do not specify the use of delimiters or warnings for the agent to ignore embedded instructions in the fetched data.
- Capability inventory: The skill enables the agent to execute shell commands via the
ghCLI tool. - Sanitization: No filtering or sanitization of the external GitHub content is performed.
Audit Metadata