project-update-items
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various
gh projectsubcommands (view, field-list, item-list, item-edit) to interact with the GitHub API. These are standard operations for managing project data.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from GitHub Project items, which could contain untrusted content acting as an injection vector.\n - Ingestion points: Data is ingested from the output of
gh project item-listas described inSKILL.md(Step 3).\n - Boundary markers: Absent; the skill does not define specific markers to isolate item data from instructions.\n
- Capability inventory: The skill can execute
gh project item-editto modify project data (Step 5 inSKILL.md).\n - Sanitization: No explicit sanitization or validation of the retrieved item titles or field values is performed before display or further processing.
Audit Metadata