github-project-triage

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands using gh (GitHub CLI), git, and a custom tool named repobar to manage and triage repositories. These operations include fetching repo views, listing issues/PRs, and inspecting local Git status, all of which are standard for the skill's intended purpose.
  • [EXTERNAL_DOWNLOADS]: The skill performs git pull to update local repositories and uses swift run to execute the repobar tool from a local project directory. These actions involve network activity to synchronize code but are restricted to the user's known development environment.
  • [PROMPT_INJECTION]: By processing content from GitHub issues and pull requests, the skill has an exposure surface for indirect prompt injection. Malicious instructions embedded in issue descriptions or PR comments could theoretically attempt to influence the agent's behavior. The skill mitigates this risk by requiring 'strong evidence' before taking actions like merging or closing and by defining strict triage heuristics.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 06:37 AM