flake
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) to perform legitimate repository management tasks such as viewing PR checks, reading workflow logs, editing issues, and rerunning failed Actions jobs. All operations are scoped to the officialremotion-dev/remotionrepository. - [EXTERNAL_DOWNLOADS]: Fetches data from GitHub, which is a well-known and trusted service. This includes downloading Actions logs via the GitHub API and retrieving issue body content.
- [PROMPT_INJECTION]: The skill was analyzed for indirect prompt injection risks since it processes external data like logs and issue bodies. Ingestion points: Logs via
gh apiand issue content viagh issue view. Boundary markers: Not explicitly defined in the prompt templates. Capability inventory: The skill can modify issues (gh issue edit) and control CI execution (gh run rerun,gh run cancel). Sanitization: The skill includes instructions to clean failure signatures of timestamps and random IDs, though it does not provide comprehensive sanitization for all log content before it reaches the model context.
Audit Metadata