learning-aggregator-ci
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to install components from a third-party GitHub repository (pskoett/pskoett-skills) using the gh skill and npx skills commands.
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes files from the .learnings/ directory which are populated by other agent tasks. This data may contain instructions from external sources that could influence the agent's behavior during the aggregation process.
- [COMMAND_EXECUTION]: Provides specific shell commands for installation (gh skill install, npx skills add) and validation (gh aw compile).
Audit Metadata