github-repo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) to interact with repositories for auditing and metadata updates. This is the primary function of the skill and aligns with its stated purpose of managing GitHub project quality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from local files and GitHub repositories (e.g., READMEs, issue templates, and metadata) to perform its audit functions. While this creates a vulnerability surface where malicious repo content could influence the agent, the behavior is intrinsic to the skill's utility and includes clear workflow phases to limit unintended actions.
- Ingestion points: Reads repository files and metadata via local access or
ghCLI commands. - Boundary markers: None explicitly defined in the instructions, though the audit follows a structured scoring system.
- Capability inventory: Includes file system write access and repository configuration changes via the
ghCLI. - Sanitization: Not explicitly documented; the skill relies on the agent's ability to analyze and improve existing prose.
- [EXTERNAL_DOWNLOADS]: The skill references and invokes other skills (
metadata-checkandreadability-check) authored by the same developer. These are legitimate dependencies within the skill ecosystem for providing specialized quality checks.
Audit Metadata