triage-issue
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads and processes untrusted input from GitHub issue titles and bodies. This presents a surface for potential indirect prompt injection, where a malicious user could craft an issue description designed to manipulate the agent's triaging logic or cause it to post specific comments. However, the provided instructions include clear bounds on the agent's behavior.
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (
gh) to interact with remote repositories. It explicitly whitelistsgh issue list,gh issue view,gh issue edit, andgh issue commentfor its operational needs. This usage is consistent with the skill's stated purpose of issue management.
Audit Metadata