rhdh-overlay-cve-export
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
gitandghCLI tools usingspawnSyncto retrieve commit history, file contents, and pull request information from a remote repository. - [EXTERNAL_DOWNLOADS]: The script clones the
rhdh-plugin-export-overlaysrepository from the developer's GitHub organization to a local temporary directory for analysis. - [PROMPT_INJECTION]: The skill processes external data including git commit messages and PR bodies. It mitigates indirect prompt injection risks by using strict regex-based filtering to extract specific CVE and Jira patterns and by outputting structured data, which serves as a boundary between the untrusted input and the agent's context.
Audit Metadata