issue-label
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from GitHub issue titles and bodies fetched via the
ghCLI. Malicious actors could embed instructions in an issue to attempt to influence the agent's actions beyond simple labeling. - Ingestion points: Output of
gh issue view(contains issue title and body) as described in SKILL.md. - Boundary markers: None present to separate the fetched issue content from the agent's internal reasoning instructions.
- Capability inventory: Shell access (Bash) and repository modification rights through
gh issue editallow for potential downstream impact if an injection is successful. - Sanitization: No sanitization, validation, or filtering of the fetched issue content is performed before the agent analyzes it.
- [COMMAND_EXECUTION]: The skill executes GitHub CLI (
gh) commands to read and update issue metadata. These operations are standard for the skill's purpose and target the vendor's own repository (toss/es-toolkit).
Audit Metadata