contributing
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from GitHub issues which could contain malicious instructions. While the workflow includes human gates, the data is processed by the agent without explicit boundary markers or instruction-override protection.\n
- Ingestion points:
SKILL.md(Step 1.1) retrieves issue details usinggh issue view.\n - Boundary markers: The skill does not implement explicit delimiters or warnings to ignore instructions within the retrieved issue text.\n
- Capability inventory: The skill executes powerful tools including
git,terraform,gcloud,gh, anduvfor local and cloud operations.\n - Sanitization: No sanitization is performed on ingested issue content for potential prompt injections, though PII sanitization is mandated for PR outputs.\n- [COMMAND_EXECUTION]: The skill executes various command-line utilities (
git,gh,terraform,gcloud,uv) to manage the development lifecycle, verify infrastructure, and interact with repository hosting services.\n- [EXTERNAL_DOWNLOADS]: Fetches provider documentation from HashiCorp's official GitHub repository usingcurlto verify resource configurations.
Recommendations
- INFO: Downloads code from trusted source(s): https://raw.githubusercontent.com/hashicorp/terraform-provider-google/v7.40.0/website/docs/r/workstations_workstation_config.html.markdown
Audit Metadata