why
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill constructs and executes shell commands such as
git blame,git log, andgh pr viewusing parameters like file paths and commit hashes parsed from the user's query. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize content from multiple external platforms including GitHub, Linear, Notion, Slack, Datadog, and Sentry.
- Ingestion points: Context is gathered from file
SKILL.mdand passed to subagents after being retrieved from PR comments, issue trackers, and chat logs. - Boundary markers: The skill does not employ specific delimiters to isolate the ingested external data from the subagents' logic.
- Capability inventory: The environment provides access to various MCP tools and shell execution capabilities. The subagents are granted
access: fullto maintain access to these tools. - Sanitization: There is no evidence of filtering or escaping of the external data before it is processed by the synthesis subagent.
Audit Metadata