issue-lifecycle
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and process external data from GitHub issues and comments, creating a surface for indirect prompt injection.
- Ingestion points: The skill uses
gh issue view [ISSUE_NUMBER] --json bodyto read issue descriptions andgh issue view [ISSUE_NUMBER] --commentsto read issue history (SKILL.md). - Boundary markers: There are no instructions provided to the agent to treat issue content or comments as untrusted data or to ignore embedded instructions within that content.
- Capability inventory: The skill utilizes several GitHub CLI tools for modification, including
gh issue comment,gh issue edit, andgh project item-edit(SKILL.md). - Sanitization: The skill lacks instructions for sanitizing or escaping the data read from issues before it is used in further logic or outputs.
Audit Metadata