status-report-generator
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a framework for processing external data from git logs, pull requests, and task descriptions, which creates an inherent surface for indirect prompt injection if those sources contain malicious instructions intended to influence the agent's summary.
- Ingestion points: Data is extracted from git logs, GitHub CLI (
gh) outputs, and task management platform APIs. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are included in the report templates.
- Capability inventory: The skill utilizes shell commands (
git,gh) to fetch data. - Sanitization: No specific sanitization or filtering of the extracted text (e.g., commit messages, PR titles) is mentioned.
- [NO_CODE]: The skill is composed entirely of markdown documentation and templates, containing no executable scripts, binaries, or automated configuration files.
Audit Metadata