github-marketplace-playbook
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is purely instructional, providing best practices and checklists for publishing GitHub Apps and Actions on the GitHub Marketplace.
- [SAFE]: No executable code, shell scripts, or external tool invocations were found within the skill files.
- [SAFE]: References to external resources are limited to official GitHub documentation and other skills authored by the same vendor (samber), which is consistent with the skill's purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill includes an interactive interview process that ingests user-provided information. However, since the skill has no defined execution capabilities (no tool usage, network operations, or file system access), there is no exploitable attack surface for this vector.
Audit Metadata