gsd-inbox
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (GitHub issues and PRs). Malicious instructions embedded in these external descriptions could attempt to influence the agent's triage decisions. This is an inherent risk for tools that aggregate and act on user-generated content from external platforms.
- [SAFE]: The skill uses standard platform tools and does not exhibit patterns of data exfiltration, unauthorized command execution, or obfuscation.
Audit Metadata