github
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
ghCLI to interact with GitHub services. It includes instructions for authenticating and executing commands to list, create, and view repository data. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted data from external sources.
- Ingestion points: Untrusted data enters the agent context through commands like
gh pr view,gh issue list,gh run view, andgh apioutput inSKILL.md. - Boundary markers: There are no explicit boundary markers or instructions to the agent to ignore potentially malicious instructions embedded in the GitHub data.
- Capability inventory: The skill enables the agent to execute shell commands, perform network requests via the GitHub API, and modify repository state (e.g., merging PRs, closing issues).
- Sanitization: No sanitization or filtering logic is present to validate or clean content retrieved from GitHub before it is processed by the agent.
Audit Metadata