spec
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill demonstrates safe behavior by strictly defining its file-system operations and network access to trusted repositories (GitHub).
- [PROMPT_INJECTION]: The skill processes untrusted data from GitHub issues and user prompts, creating an indirect prompt injection surface.
- Ingestion points: Data enters via GitHub issue fetch and reading user-supplied files or text as described in
SKILL.md. - Boundary markers: No specific boundary markers or instructions to isolate the input data are defined in the skill.
- Capability inventory: The skill reads files, fetches from the network (GitHub), and writes files to the project directory structure (
SKILL.md). - Sanitization: The instructions do not include steps to sanitize or validate the content of the ingested data before processing.
Audit Metadata