ghpm-work
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the GitHub CLI (
gh) and Git to perform project management tasks. It executes commands to fetch issue data, modify issue metadata, post comments, manage local branches, and create pull requests. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from GitHub issue bodies and comments to drive logic like clarity evaluation and decision extraction.
- Ingestion points: External content is fetched from GitHub via
gh issue viewinreferences/clarify.md,references/decisions.md, andreferences/wrap-up.md. - Boundary markers: The skill does not employ specific delimiters or "ignore instructions" warnings when presenting external issue content to the agent for analysis.
- Capability inventory: The agent has permissions to execute shell commands (
gh,git) and perform file system operations (Read, Write, Edit). - Sanitization: There is no evidence of sanitization, filtering, or escaping of the fetched issue content before it is processed by the agent.
Audit Metadata