github-actions-inspection
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it performs analysis on GitHub Actions logs, which are untrusted external data sources that could contain malicious instructions designed to influence agent behavior.
- Ingestion points: External data enters the agent context via
gh run view --log,gh run download, andgh apicalls in bothSKILL.mdandREFERENCE.md. - Boundary markers: There are no boundary markers or explicit instructions provided to the agent to treat log content as untrusted or to ignore embedded instructions.
- Capability inventory: The skill utilizes tools with significant capabilities including
gh run rerun,gh run cancel, and generalgh apiaccess to repository resources. - Sanitization: The instructions do not include any patterns for sanitizing, escaping, or validating the content of the logs before the agent processes them.
Audit Metadata