github-url-intercept

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands using the gh CLI or specialized Python scripts based on URL components provided by the user. This is a functional requirement for the skill's purpose and reduces token overhead by fetching JSON rather than HTML.\n- [COMMAND_EXECUTION]: The provided script test_url_routing.py dynamically constructs shell commands for GitHub interactions. To mitigate potential security risks, the script implements a robust input validation layer (is_safe_input) that sanitizes URL parameters against strict regular expressions and a blacklist of dangerous shell characters, effectively addressing command injection vulnerabilities (CWE-78).
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 03:46 PM