github-fix-issue
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from GitHub issue titles, bodies, and comments, which are potential vectors for indirect prompt injection.
- Ingestion points: Data enters through
gh issue viewand codebase searches as described in the Workflow section ofSKILL.md. - Boundary markers: The skill contains explicit instructions to treat GitHub content as untrusted data and to ignore embedded instructions.
- Capability inventory: The agent can write to the local filesystem, execute shell commands for testing, and mutate GitHub state via the
ghCLI. - Sanitization: No technical sanitization or schema validation of the external content is performed; the skill relies on instructional guardrails.
- [COMMAND_EXECUTION]: The skill is designed to run local tests and use the GitHub CLI (
gh). This involves executing shell commands and potentially running code defined within the repository's test suite.
Audit Metadata