github-actions-efficiency
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) and ripgrep (rg) to inspect workflow definitions and execution logs. These commands are executed locally to gather diagnostic data and are consistent with the skill's purpose.- [PROMPT_INJECTION]: The skill ingests data from.github/workflows/files and CI execution logs, which represents an indirect prompt injection surface. \n - Ingestion points: Content of
.github/workflows/and output fromgh run view --log-failed.\n - Boundary markers: None present; the skill assumes repo files and logs are safe to process for auditing.\n
- Capability inventory: Use of shell commands (
gh,rg) to read and analyze repository data.\n - Sanitization: None; the skill relies on standard tool behavior for data retrieval.
Audit Metadata