043-planning-github-issues
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs the GitHub CLI (
gh) to perform repository management tasks including listing issues and fetching discussion threads. - [EXTERNAL_DOWNLOADS]: Links to the official GitHub CLI website (cli.github.com) and suggests standard platform package managers (Homebrew, winget) for manual user-initiated installation.
- [PROMPT_INJECTION]: The skill processes external data from GitHub issue bodies and comments, creating a potential surface for indirect prompt injection. (1) Ingestion points: issue descriptions and comments retrieved via
gh issue view. (2) Boundary markers: Absent. (3) Capability inventory: Read-only GitHub CLI operations. (4) Sanitization: No explicit content filtering or validation is mentioned, though usage is restricted to analytical contexts.
Audit Metadata