epic-management
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute GitHub CLI (gh) commands for managing project infrastructure. Evidence: SKILL.md includes multiple bash scripts for creating labels ('gh label create'), creating issues ('gh issue create'), and managing project board items ('gh project item-add', 'gh project item-edit').
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external GitHub issues and projects and interpolates it into shell variables and commands without explicit sanitization.
- Ingestion points: Issue and project data retrieved via 'gh issue view' and 'gh project item-list' in SKILL.md.
- Boundary markers: There are no explicit delimiters or boundary markers used to separate retrieved data from the surrounding shell command logic.
- Capability inventory: The skill has access to the Bash execution environment and the mcp__github__* toolset for repository management.
- Sanitization: The provided script templates do not include evidence of input validation or shell escaping for placeholders like [EPIC_NUMBER] or [SHORT-NAME] before execution.
Audit Metadata