repository-health-review
Pass
Audited by Gen Agent Trust Hub on Nov 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions define a purely analytical, read-only workflow. It uses standard GitHub API tools to gather statistics on repository activity and security alert counts without executing any external code or modifying the target repository.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from repository sources including commit messages, issue descriptions, and pull request content. This constitutes an attack surface for indirect prompt injection. However, the risk is mitigated by the skill's narrow scope and lack of exploitable capabilities such as arbitrary command execution, file system writes, or outbound network requests.
- Ingestion points:
list_commits,list_pull_requests,list_issues(SKILL.md). - Boundary markers: Absent.
- Capability inventory: Read-only GitHub metadata retrieval tools.
- Sanitization: Absent.
Audit Metadata