git-pr-workflows-onboard
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill uses the $ARGUMENTS variable to ingest role-specific context without using boundary markers or delimiters, creating a potential surface for indirect prompt injection.
- Ingestion points: The $ARGUMENTS variable in SKILL.md parses role and technical details.
- Boundary markers: No delimiters or warnings to ignore embedded instructions are present.
- Capability inventory: The skill describes workflows for account creation and hardware ordering across the instructions in SKILL.md.
- Sanitization: There is no evidence of validation or filtering for the external content provided via arguments.
Audit Metadata