contributing

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from GitHub issues which could contain malicious instructions. While the workflow includes human gates, the data is processed by the agent without explicit boundary markers or instruction-override protection.\n
  • Ingestion points: SKILL.md (Step 1.1) retrieves issue details using gh issue view.\n
  • Boundary markers: The skill does not implement explicit delimiters or warnings to ignore instructions within the retrieved issue text.\n
  • Capability inventory: The skill executes powerful tools including git, terraform, gcloud, gh, and uv for local and cloud operations.\n
  • Sanitization: No sanitization is performed on ingested issue content for potential prompt injections, though PII sanitization is mandated for PR outputs.\n- [COMMAND_EXECUTION]: The skill executes various command-line utilities (git, gh, terraform, gcloud, uv) to manage the development lifecycle, verify infrastructure, and interact with repository hosting services.\n- [EXTERNAL_DOWNLOADS]: Fetches provider documentation from HashiCorp's official GitHub repository using curl to verify resource configurations.
Recommendations
  • INFO: Downloads code from trusted source(s): https://raw.githubusercontent.com/hashicorp/terraform-provider-google/v7.40.0/website/docs/r/workstations_workstation_config.html.markdown
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 01:54 PM
Security Audit — agent-trust-hub — contributing