gentle-ai-collab-perfect
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data, including GitHub Pull Request bodies, issue comments, and repository configuration files. This ingestion of untrusted data represents a potential surface for indirect prompt injection. However, the skill explicitly mitigates this risk by instructing the agent to cross-check all claims against the GitHub API and requiring explicit human authorization before performing any mutations or publication actions.
- [SAFE]: The skill demonstrates a strong security posture by implementing a clear separation of roles between contributors and maintainers. It leverages standard, well-known development tools such as the GitHub CLI (gh), Git, and Go toolchains. Furthermore, it includes explicit instructions to avoid probing ambient credentials and to verify the target host's authority before recommending actions.
Audit Metadata