project-status-sync
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill extensively uses the
gh(GitHub CLI) tool within a Bash environment to interact with GitHub Projects. It performs actions such as listing projects, retrieving field IDs, listing items, and editing project items. - [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from external GitHub Project environments, creating an attack surface where untrusted data in project field names or option names could be ingested into the agent's context.
- Ingestion points: Data enters the agent's context via
gh project list,gh project field-list, andgh project item-listcommands (SKILL.md). - Boundary markers: None are present in the instructions to delimit external content.
- Capability inventory: The skill has the capability to execute shell commands via Bash and interact with GitHub via the
ghCLI. - Sanitization: The skill uses
jqfor JSON parsing and extraction of specific fields, providing structural validation of the data retrieved from the API. - [DYNAMIC_EXECUTION]: The skill dynamically constructs shell commands by interpolating variables (such as
PROJECT_ID,ITEM_ID, andFIELD_ID) retrieved at runtime from the GitHub API into subsequent bash command invocations.
Audit Metadata