github-url-intercept
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands using the
ghCLI or specialized Python scripts based on URL components provided by the user. This is a functional requirement for the skill's purpose and reduces token overhead by fetching JSON rather than HTML.\n- [COMMAND_EXECUTION]: The provided scripttest_url_routing.pydynamically constructs shell commands for GitHub interactions. To mitigate potential security risks, the script implements a robust input validation layer (is_safe_input) that sanitizes URL parameters against strict regular expressions and a blacklist of dangerous shell characters, effectively addressing command injection vulnerabilities (CWE-78).
Audit Metadata