gitcrawl
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's operation requires executing the
gitcrawlandgh(GitHub CLI) command-line tools. - [EXTERNAL_DOWNLOADS]: The skill uses
gitcrawl initto download a data store from a remote Git repository (git@github.com:openclaw/gitcrawl-store.git). - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its processing of untrusted data from GitHub issues and pull requests.
- Ingestion points: Untrusted data enters the agent context through command outputs from
gitcrawl threads,gitcrawl search,gh pr view, andgh issue viewas specified inSKILL.md. - Boundary markers: No boundary markers or specific instructions are provided to help the agent distinguish between its system instructions and content retrieved from GitHub threads.
- Capability inventory: The agent has the capability to execute shell commands (
gitcrawl,gh) based on the instructions provided in the skill. - Sanitization: There is no explicit sanitization, filtering, or validation of the data retrieved from external sources before it is processed by the agent.
Audit Metadata