project-board-enforcement
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard system utilities including
gh,jq,git,sed, andgrepto interact with the local development environment and GitHub's project management infrastructure. These tools are used appropriately for querying and updating project metadata. - [INDIRECT_PROMPT_INJECTION]: The skill features functions that ingest data from external sources (GitHub API responses via
ghCLI). While this constitutes an attack surface for indirect prompt injection, the skill employs robust JSON parsing withjqand implements explicit logic for validating status transitions, which serves to minimize the risk of processing malicious data payloads. - [SAFE]: The skill does not contain any hardcoded credentials, remote code downloads from untrusted sources, or obfuscation techniques. All operations are focused on project state enforcement as described in the metadata.
Audit Metadata