milestone-management

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands and the gh (GitHub CLI) tool to perform repository management tasks, including creating and editing milestones and issues.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources (GitHub milestones and issues) and uses that data in subsequent operations like generating reports or commenting on issues.
  • Ingestion points: The skill fetches milestone titles, descriptions, and issue numbers using gh api and gh issue list in SKILL.md.
  • Boundary markers: None. There are no instructions to the agent to treat data retrieved from GitHub as untrusted or to ignore embedded instructions.
  • Capability inventory: The skill has the ability to write to GitHub via gh issue create, gh issue edit, and gh issue comment across various sections in SKILL.md.
  • Sanitization: The skill uses jq for parsing JSON responses from the GitHub API, which provides some structure, but the resulting values (like milestone titles) are interpolated directly into shell echo commands and GitHub comments without further sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 02:44 PM