knowledge-github

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (gh) to automate project management tasks, such as linking boards to repositories (gh project link). These commands are standard for the skill's stated purpose and operate within the scope of the configured repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill's behavior is influenced by the contents of a local file (KNOWLEDGE.md) and data from a board management tool, creating a surface for indirect instructions.
  • Ingestion points: Reads parameters (workflow, repository, board) and free-form instructions from KNOWLEDGE.md at the start of each session.
  • Boundary markers: The skill is instructed to treat KNOWLEDGE.md as a binding manifest, but there are no specific markers to separate data from instructions within that file.
  • Capability inventory: The agent can execute shell commands via the gh CLI and perform Git operations (commit, push, branch creation).
  • Sanitization: No explicit sanitization or validation of the input retrieved from the configuration file is mentioned.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 02:57 PM
Security Audit — agent-trust-hub — knowledge-github