sred-project-organizer

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill processes project data from external sources, which presents a surface for indirect prompt injection.
  • Ingestion points: Link to Notion work summaries, GitHub Pull Request content, and Linear ticket data.
  • Boundary markers: The instructions do not specify explicit delimiters or warnings to ignore instructions contained within the external data.
  • Capability inventory: The skill uses the gh CLI for GitHub access and Model Context Protocol (MCP) for reading and writing to Notion and Linear.
  • Sanitization: There are no specific instructions for the sanitization of content retrieved from external developer tools.
  • [COMMAND_EXECUTION]: The skill utilizes the standard GitHub command-line tool (gh) to retrieve pull request and repository information, which is consistent with its stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 11:30 PM
Security Audit — agent-trust-hub — sred-project-organizer