atlas-crew-tasks
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages the GitHub CLI (
gh) to interact with issues and Project v2 boards. - It instructs the agent to request the highly privileged
admin:orgscope viagh auth refreshto perform administrative tasks like creating issue types at the organization level. - It uses
gh apiandgh api graphqlto perform state-changing operations (PATCH, POST, Mutations) on GitHub repository items. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) through the processing of external repository data.
- Ingestion points: Data enters the agent context from GitHub issue titles, bodies, and project fields through commands like
gh project item-listand thegh seqtool. - Boundary markers: There are no explicit delimiters or safety instructions (e.g., "ignore embedded commands") used when the agent processes data from these external sources.
- Capability inventory: The skill allows the agent to create new issues, modify existing issue types, and update project metadata across multiple repositories.
- Sanitization: No sanitization or validation of ingested issue content is performed before it is used to influence the agent's task-sequencing or update logic.
Audit Metadata