github-actions-inspection

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it performs analysis on GitHub Actions logs, which are untrusted external data sources that could contain malicious instructions designed to influence agent behavior.
  • Ingestion points: External data enters the agent context via gh run view --log, gh run download, and gh api calls in both SKILL.md and REFERENCE.md.
  • Boundary markers: There are no boundary markers or explicit instructions provided to the agent to treat log content as untrusted or to ignore embedded instructions.
  • Capability inventory: The skill utilizes tools with significant capabilities including gh run rerun, gh run cancel, and general gh api access to repository resources.
  • Sanitization: The instructions do not include any patterns for sanitizing, escaping, or validating the content of the logs before the agent processes them.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 10:52 PM
Security Audit — agent-trust-hub — github-actions-inspection