comet-github-issue-fix
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and act upon data from GitHub Issues and Pull Requests, which are untrusted external sources. This creates a risk of indirect prompt injection where malicious instructions could be embedded in an issue description to manipulate the agent's behavior during implementation.
- Ingestion points: Reads real-time GitHub Issue/PR content as input contracts (mentioned in
SKILL.md). - Boundary markers: Absent; the instructions do not define clear delimiters or tell the agent to ignore embedded instructions within the ingested text.
- Capability inventory: The skill is authorized to modify production code, manage runtime environments, and execute build/test commands.
- Sanitization: No evidence of sanitization or validation of external input before processing or interpolation into prompts.
Audit Metadata