github
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains educational documentation and standard usage examples for the official GitHub CLI (
gh). No malicious execution patterns or suspicious commands were identified. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external repository data, such as pull request bodies and issue descriptions. This introduces a surface where untrusted data could contain embedded instructions. As this is the primary intended function for repository management tools, it is noted here as a standard characteristic of the capability surface rather than a specific vulnerability in the skill's logic.
Audit Metadata