brainstorm
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill extensively uses the GitHub CLI (
gh) to create, read, and update issues and labels, which serves as the primary data store for requirements. - [DYNAMIC_EXECUTION]: The skill executes local scripts, including
repo-profile-cache.py(Python) andvisual-probe-server.js(Node.js), to manage repository orientation metadata and provide local visual previews for UI/UX decisions. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile documents the! gh auth loginsyntax, which is a platform-specific feature for executing shell commands at skill load time. This is used here to guide the user through authentication. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from GitHub issue bodies, creating an ingestion point for untrusted data that could contain malicious instructions.
- Ingestion points: Data enters the context via
gh issue viewcalls (e.g., inSKILL.mdPhase 0.0 and 0.1). - Boundary markers: The skill explicitly isolates the user's original words in a
## Background / original wordssection, providing a degree of structural delimitation. - Capability inventory: The skill has significant capabilities, including shell command execution (
gh) and file system operations. - Sanitization: The skill treats ingested content as markdown and does not perform explicit sanitization beyond standard agentic processing.
Audit Metadata