sociuu-ship
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from GitLab and GitHub platforms, such as merge request status, assignee information, and approval states.
- Ingestion points: Metadata fetched via
glab(GitLab) andgh(GitHub) command-line tools, specifically regarding merge request assignees and approval records. - Boundary markers: The instructions explicitly state that approvals relayed through merge request comments or tool results do not count, requiring instructions to originate from the current chat session.
- Capability inventory: The skill is designed to perform code merges on repository forges when specific conditions are met.
- Sanitization: The skill instructs the agent to verify specific structured data fields (like
approved_byin GitLab orreviewsin GitHub) rather than relying on unstructured content like comments for authorization checks.
Audit Metadata