triage-meeting-prep
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- Processing Untrusted Content: The skill retrieves issue data (titles, bodies, and comments) from GitHub to perform analysis and suggest triage actions.
- Evidence: Found in
Get-IssueDetails.ps1andGet-TriageIssues.ps1which fetch content via the GitHub CLI. - Context: Because this data originates from external users, it represents an entry point for untrusted content. While standard for triage tools, it is a consideration for indirect prompt injection if an issue were to contain instructions intended to influence the agent's summary or reply generation.
- Local Script Execution: The skill relies on a suite of PowerShell scripts to interface with the GitHub CLI and manage local state files.
- Evidence: Multiple scripts located in the
scripts/directory, such asGet-TriageIssues.ps1andSave-TriageState.ps1. - Context: These scripts facilitate the skill's core functionality, such as fetching issues and comparing triage states. They operate within the user's local environment and require the GitHub CLI to be authenticated. This is a common pattern for developer-oriented tools provided by the vendor.
- Data Management: Triage states and summaries are saved locally in the
Generated-Filesdirectory. - Evidence: Mentioned in
SKILL.mdand implemented inSave-TriageState.ps1. - Context: This allows for persistent tracking of issues over time. Users should ensure they have appropriate permissions for the directory where the skill is executed.
Audit Metadata