research
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill utilizes the
gh(GitHub CLI) tool to retrieve issue data from thedocker/docsrepository. This is an expected operation for a tool designed to investigate documentation problems. - [Indirect Prompt Injection]: The skill ingests content from external GitHub issues, which is necessary for identifying reported problems. Because this data comes from an external source, it could potentially contain content intended to influence agent behavior.
- Ingestion points: The
gh issue viewcommand inSKILL.mdretrieves the title, body, and comments of specific issues. - Boundary markers: No explicit delimiters or instructions are provided to the agent to separate issue data from its internal operating instructions.
- Capability inventory: The skill allows the agent to execute specific
ghcommands, search the local file system, and read file contents. - Sanitization: The instructions do not specify any validation or filtering of the retrieved issue content before it is processed.
Audit Metadata