list-issues-pr-pulse
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill retrieves data from GitHub issues and pull requests, which may contain attacker-controlled text that could influence agent behavior via indirect prompt injection.
- Ingestion points: Data enters the agent context through
gh issue listandgh pr listcommand outputs as defined inSKILL.md. - Boundary markers: The current output format does not use specific delimiters or instructions to ignore instructions embedded within the retrieved issue or PR titles.
- Capability inventory: The skill utilizes subprocess execution via the GitHub CLI (
gh). - Sanitization: The skill uses
jqto format JSON into text, which provides structure but does not filter the content of the fields for malicious instructions.
Audit Metadata