project-status-sync

Pass

Audited by Gen Agent Trust Hub on Oct 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill extensively uses the gh (GitHub CLI) tool within a Bash environment to interact with GitHub Projects. It performs actions such as listing projects, retrieving field IDs, listing items, and editing project items.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from external GitHub Project environments, creating an attack surface where untrusted data in project field names or option names could be ingested into the agent's context.
  • Ingestion points: Data enters the agent's context via gh project list, gh project field-list, and gh project item-list commands (SKILL.md).
  • Boundary markers: None are present in the instructions to delimit external content.
  • Capability inventory: The skill has the capability to execute shell commands via Bash and interact with GitHub via the gh CLI.
  • Sanitization: The skill uses jq for JSON parsing and extraction of specific fields, providing structural validation of the data retrieved from the API.
  • [DYNAMIC_EXECUTION]: The skill dynamically constructs shell commands by interpolating variables (such as PROJECT_ID, ITEM_ID, and FIELD_ID) retrieved at runtime from the GitHub API into subsequent bash command invocations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 20, 2026, 06:46 AM