debug-test-examples-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of standard development and debugging instructions for managing CI/CD workflows.
- [DATA_EXPOSURE_AND_EXFILTRATION]: Use of the
$GITHUB_TOKENenvironment variable for authentication with the GitHub API is a standard and recommended practice for command-line tool integration. The network requests target the officialapi.github.comdomain to manage labels and fetch workflow metadata. - [COMMAND_EXECUTION]: The shell commands provided are transparent and serve the primary purpose of the skill: interacting with GitHub Actions for debugging. This includes managing PR labels and downloading build logs, all within the context of the vendor's own repository (
OpenHands/software-agent-sdk). - [INDIRECT_PROMPT_INJECTION]: While the skill involves downloading and unzipping logs from an external source (GitHub Actions), this is a routine part of CI/CD debugging and does not present a high-risk attack surface in this context.
Audit Metadata