github
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the execution of the
gh(GitHub CLI) tool to perform its functions. This is the primary purpose of the skill and involves standard subcommands such asissue,pr,run, andapi. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external, untrusted data that could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Commands such as
gh issue list,gh pr checks, andgh apifetch content (issue titles, PR metadata, and workflow logs) from external GitHub repositories. - Boundary markers: No specific delimiters or instructions are provided to the agent to ignore potentially malicious content embedded in the fetched data.
- Capability inventory: The agent can execute various GitHub CLI commands which may affect repository state (e.g., commenting on PRs or modifying issues).
- Sanitization: There is no evidence of sanitization or filtering of the content retrieved from GitHub before it is processed by the agent.
Audit Metadata