issue-triage-cx
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it instructions the agent to ingest and process untrusted data from GitHub issue descriptions.
- Ingestion points: Data is read from external GitHub issues using the
gh issue listcommand inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the issue content.
- Capability inventory: The skill's capabilities are limited to listing issues and editing them (adding labels) using the
ghtool. - Sanitization: No explicit sanitization or filtering of the ingested issue content is mentioned.
- [COMMAND_EXECUTION]: The skill uses the standard GitHub CLI (
gh) to perform issue management tasks, which is consistent with its stated purpose of issue triage.
Audit Metadata