work-intake
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data in the form of work requests from users.
- Ingestion points: Untrusted data enters the agent context through the "REQUEST RECEIVED" step described in SKILL.md.
- Boundary markers: The skill does not employ explicit boundary markers or delimiters for the ingested request data.
- Capability inventory: The skill uses the
ghCLI (GitHub) for reading project information and themcp__memory__create_entitiestool to store intake assessments. - Sanitization: There is no evidence of input sanitization or validation of the request content before it is stored in memory or used for scoping decisions.
- [COMMAND_EXECUTION]: The skill provides bash scripts intended for environment verification. These scripts use the GitHub CLI (
gh) to check the status of project boards and verify that required environment variables such asGITHUB_PROJECT_NUMandGH_PROJECT_OWNERare correctly set.
Audit Metadata