ghpm-status
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from GitHub Project items that could contain malicious instructions.
- Ingestion points: Project items (titles, descriptions, and field values) are read via the gh CLI as specified in the Aggregate phase of SKILL.md.
- Boundary markers: No explicit delimiters or boundary markers are defined in the instructions to isolate untrusted item data from the agent's internal logic.
- Capability inventory: The skill utilizes Bash(gh:*), Read, and Grep tools to process project information.
- Sanitization: No sanitization, validation, or escaping of the retrieved external content is mentioned before it is processed by the agent.
Audit Metadata