milestone-management
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands and the
gh(GitHub CLI) tool to perform repository management tasks, including creating and editing milestones and issues. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (GitHub milestones and issues) and uses that data in subsequent operations like generating reports or commenting on issues.
- Ingestion points: The skill fetches milestone titles, descriptions, and issue numbers using
gh apiandgh issue listinSKILL.md. - Boundary markers: None. There are no instructions to the agent to treat data retrieved from GitHub as untrusted or to ignore embedded instructions.
- Capability inventory: The skill has the ability to write to GitHub via
gh issue create,gh issue edit, andgh issue commentacross various sections inSKILL.md. - Sanitization: The skill uses
jqfor parsing JSON responses from the GitHub API, which provides some structure, but the resulting values (like milestone titles) are interpolated directly into shellechocommands and GitHub comments without further sanitization.
Audit Metadata