github
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill requires the official GitHub CLI (gh) tool and provides installation instructions for Homebrew and APT package managers. This dependency originates from a well-known, trusted service and is necessary for the skill's documented purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to read content from GitHub pull requests and issues, which is an inherent part of its functionality. 1. Ingestion points: PR bodies, issue descriptions, and workflow logs fetched via gh commands (SKILL.md). 2. Boundary markers: Not specified in the provided templates. 3. Capability inventory: Repository data retrieval, issue and PR management, and workflow interaction. 4. Sanitization: None explicitly defined beyond standard tool behavior.
Audit Metadata