github-project-triage
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands using
gh(GitHub CLI),git, and a custom tool namedrepobarto manage and triage repositories. These operations include fetching repo views, listing issues/PRs, and inspecting local Git status, all of which are standard for the skill's intended purpose. - [EXTERNAL_DOWNLOADS]: The skill performs
git pullto update local repositories and usesswift runto execute therepobartool from a local project directory. These actions involve network activity to synchronize code but are restricted to the user's known development environment. - [PROMPT_INJECTION]: By processing content from GitHub issues and pull requests, the skill has an exposure surface for indirect prompt injection. Malicious instructions embedded in issue descriptions or PR comments could theoretically attempt to influence the agent's behavior. The skill mitigates this risk by requiring 'strong evidence' before taking actions like merging or closing and by defining strict triage heuristics.
Audit Metadata