github-post
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external repositories to determine project conventions. This data includes issue titles, pull request titles, and repository template schemas fetched via the GitHub and Piper APIs.
- Ingestion points: The
OrientationGathererclass inlib/orient.dartfetches remote content usinggh pr list,gh issue list, andgh apicalls. - Boundary markers: The skill does not use specific delimiters or instructions to ignore potential injection within the orientation data, although it does require manual user approval before the final issue or pull request is submitted.
- Capability inventory: The skill has the ability to create issues and pull requests via the
ghCLI tool as defined inSKILL.md(Step 5) andlib/orient.dart. - Sanitization: No explicit sanitization or filtering of the fetched metadata (titles, labels, templates) is performed before it is presented to the agent.
- [COMMAND_EXECUTION]: The skill utilizes the
Process.runfunction inlib/orient.dartto execute system commands includinggh(GitHub CLI) andp4(Perforce/Piper). These commands are used to view repository status, list issues/PRs, and call GitHub APIs to gather project conventions. - [EXTERNAL_DOWNLOADS]: The skill fetches configuration and template data from GitHub's official API.
- Metadata and issue form schemas are retrieved from
repos/$remoteRepo/contents/paths via the GitHub CLI's API tool.
Audit Metadata