orchestrate
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources to define its orchestration logic and branch strategy.
- Ingestion points: The
references/github-autopilot.mdscript fetches issue body and title content viagh issue view. - Boundary markers: There are no explicit instructions to the agent to ignore embedded commands or malicious directives within the parsed issue content.
- Capability inventory: The skill possesses high-privilege permissions to write to worktrees, manage branches, and modify pull requests and issue trackers.
- Sanitization: It uses regex to extract branch names from the body, but the broader orchestration wave logic is driven by external prose.
- [COMMAND_EXECUTION]: The skill relies on complex shell-based logic to perform repository and state management.
- Evidence:
references/github-autopilot.mdcontains a multi-step bash script that executesgh,git,jq,awk, andsedusing data derived from external issue specifications.
Audit Metadata