new-feature
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read external data from the environment by listing and diffing open Pull Requests. This represents an ingestion point for untrusted data that could potentially contain malicious instructions, though the risk is inherent to the skill's primary function of managing development tasks.
- Ingestion points:
gh pr diff <n> --name-onlyandgh pr listcommands are used to read external Pull Request metadata and content (SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the diff content are provided.
- Capability inventory: The skill utilizes
gitfor repository management,cdfor directory navigation, and recommends running dependency installation commands (SKILL.md). - Sanitization: No sanitization or validation of the content retrieved from GitHub PRs is performed before processing.
Audit Metadata