gh-cli-agentic
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a set of templates for using the
ghcommand-line tool. These commands are optimized for agentic consumption by using--jsonflags and--jqfiltering to ensure structured and predictable data processing. - [PROMPT_INJECTION]: The skill identifies an attack surface for indirect prompt injection by facilitating the ingestion of untrusted data from external sources (GitHub PRs and Issues).
- Ingestion points: The
gh pr viewandgh issue viewcommands are configured to retrieve thebodyfield from pull requests and issues (SKILL.md, lines 40, 107). - Boundary markers: The templates do not implement delimiters or instructions to treat external data as potentially untrusted.
- Capability inventory: The skill provides the agent with write capabilities such as
gh workflow run,gh issue transfer, andgh issue develop(SKILL.md, lines 89, 152, 161). - Sanitization: No explicit sanitization or validation of the retrieved content is described in the workflow patterns.
- [COMMAND_EXECUTION]: The skill demonstrates the use of dynamic context injection syntax (
!command). The documented examples are used for read-only status reporting (gh pr checksandgh run view) and adhere to platform-specific error handling best practices.
Audit Metadata