knowledge-github
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) to automate project management tasks, such as linking boards to repositories (gh project link). These commands are standard for the skill's stated purpose and operate within the scope of the configured repository. - [INDIRECT_PROMPT_INJECTION]: The skill's behavior is influenced by the contents of a local file (
KNOWLEDGE.md) and data from a board management tool, creating a surface for indirect instructions. - Ingestion points: Reads parameters (
workflow,repository,board) and free-form instructions fromKNOWLEDGE.mdat the start of each session. - Boundary markers: The skill is instructed to treat
KNOWLEDGE.mdas a binding manifest, but there are no specific markers to separate data from instructions within that file. - Capability inventory: The agent can execute shell commands via the
ghCLI and perform Git operations (commit, push, branch creation). - Sanitization: No explicit sanitization or validation of the input retrieved from the configuration file is mentioned.
Audit Metadata