work-intake
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell script blocks to automate the discovery and verification of GitHub project settings. It invokes the
ghCLI,git, andjqto inspect project fields and environment configurations. Environment variables such asGITHUB_PROJECT_NUMandGH_PROJECT_OWNERare derived through regex-based extraction from repository metadata. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process arbitrary user work requests and repository data (e.g., README.md, GitHub issues). While this represents a potential surface for indirect prompt injection, the risk is addressed through a structured triage process that requires explicit agent-user interaction for clarification. The skill uses regex filtering when deriving configuration values from external strings, providing a layer of sanitization for shell execution.
Audit Metadata