create-private-repo
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple GitHub CLI (
gh) commands to retrieve user information, create private repositories, and clone them to the local filesystem. - [INDIRECT_PROMPT_INJECTION]: The skill accepts a user-provided repository description and interpolates it directly into a shell command (
gh repo create <login>/<name> --private --description <description>) without explicit sanitization or boundary markers. - Ingestion points:
SKILL.md(Step 3) processes the repository description provided by the user. - Boundary markers: Absent.
- Capability inventory: Shell command execution via the
ghtool. - Sanitization: Absent; the raw description string is passed as an argument to the repository creation command.
Audit Metadata