skills/kirkchen/cadence/triage-issue/Gen Agent Trust Hub

triage-issue

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses established GitHub CLI tools to perform administrative tasks within a repository. No evidence of credential theft, data exfiltration, or malicious command execution was found.
  • [PROMPT_INJECTION]: The skill is subject to indirect prompt injection as it ingests untrusted data from GitHub issue titles and bodies.
  • Ingestion points: Issue content is retrieved via gh issue view in SKILL.md.
  • Boundary markers: There are no explicit markers or instructions to the agent to ignore instructions found within the issue content.
  • Capability inventory: The skill has the ability to modify repository state via gh issue edit and post comments via gh issue comment in SKILL.md.
  • Sanitization: No sanitization of the input data is performed before the agent generates triage labels or comments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 01:30 AM
Security Audit — agent-trust-hub — triage-issue