maintainer-review
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill is designed to ingest and analyze external data from GitHub issue and pull request URLs.
- Ingestion points: The workflow accepts GitHub URLs and reads reports, comments, patches, and linked materials (
SKILL.md). - Boundary markers: The instructions implement strong logical boundaries by requiring the agent to restate claims in falsifiable sentences and distinguish between a reporter's proposed mechanism and the actual requirement.
- Capability inventory: The skill explicitly denies authorization for runtime probes, imports, benchmarks, or service calls, limiting its capability to text-based analysis and drafting.
- Sanitization: It features a 'Synthetic edge-case and extreme-value gate' specifically designed to filter out and default-close reports based on unrealistic, manually corrupted, or adversarial inputs, which serves as a protective layer against malicious data.
- [Static Analysis Guardrails]: The instructions mandate a 'desk-review-only' approach, which ensures that the agent focuses on code-path tracing and logical verification without executing potentially untrusted code found in pull request patches.
Audit Metadata