team-collaboration-issue

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from GitHub issue reports and comments.
  • Ingestion points: Untrusted data is ingested from GitHub issues and comments in resources/implementation-playbook.md using gh issue view commands.
  • Boundary markers: The instructions lack explicit boundary markers or warnings to ignore instructions potentially embedded in the fetched issue body or comments.
  • Capability inventory: The agent has broad capabilities including shell command execution (git, gh, npm), file system access, and network operations (git push).
  • Sanitization: No sanitization or validation of the fetched GitHub content is prescribed before the agent processes it for task implementation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 11:54 AM