skills/docker/docs/research/Gen Agent Trust Hub

research

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [Command Execution]: The skill utilizes the gh (GitHub CLI) tool to retrieve issue data from the docker/docs repository. This is an expected operation for a tool designed to investigate documentation problems.
  • [Indirect Prompt Injection]: The skill ingests content from external GitHub issues, which is necessary for identifying reported problems. Because this data comes from an external source, it could potentially contain content intended to influence agent behavior.
  • Ingestion points: The gh issue view command in SKILL.md retrieves the title, body, and comments of specific issues.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to separate issue data from its internal operating instructions.
  • Capability inventory: The skill allows the agent to execute specific gh commands, search the local file system, and read file contents.
  • Sanitization: The instructions do not specify any validation or filtering of the retrieved issue content before it is processed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 08:00 PM