github-integration
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-provided integration requests which can serve as a vector for indirect prompt injection.
- Ingestion points: GitHub automation and Octokit integration requests (SKILL.md).
- Boundary markers: No specific delimiters or isolation markers are defined in the instructions.
- Capability inventory: Execution environment includes file system and shell access via claude-code and API platforms.
- Sanitization: While the skill advises validating inputs, it lacks concrete implementation patterns or sanitization logic.
- [NO_CODE]: The skill package contains only markdown instructions and does not include any accompanying code files or executable scripts.
Audit Metadata