address-github-comments
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content by fetching GitHub PR comments using the
ghCLI. This creates a surface where a malicious comment could attempt to influence the agent's behavior during the code-fixing phase. - Ingestion points: External data enters the context via
gh pr view --commentsinSKILL.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the retrieved comments.
- Capability inventory: The agent is instructed to perform file system modifications ('Apply Fixes') and network operations via
gh pr commentbased on the ingested data. - Sanitization: There is no evidence of sanitization or filtering applied to the fetched comment text before the agent processes it for planning or execution.
Audit Metadata