issue-lifecycle

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read and process external data from GitHub issues and comments, creating a surface for indirect prompt injection.
  • Ingestion points: The skill uses gh issue view [ISSUE_NUMBER] --json body to read issue descriptions and gh issue view [ISSUE_NUMBER] --comments to read issue history (SKILL.md).
  • Boundary markers: There are no instructions provided to the agent to treat issue content or comments as untrusted data or to ignore embedded instructions within that content.
  • Capability inventory: The skill utilizes several GitHub CLI tools for modification, including gh issue comment, gh issue edit, and gh project item-edit (SKILL.md).
  • Sanitization: The skill lacks instructions for sanitizing or escaping the data read from issues before it is used in further logic or outputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:47 AM