github-search
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
uv runto execute a local Python scriptscripts/mcp/github_search.pythat handles the logic for searching GitHub content. This is the intended behavior for the tool.- [EXTERNAL_DOWNLOADS]: The skill communicates with GitHub's official API to fetch data. As GitHub is a well-known service and the downloads are limited to search results, this is documented as safe.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data (search results from GitHub) which represents an attack surface. Ingestion points: Search results from GitHub code, issues, and PRs enter the agent's context throughscripts/mcp/github_search.py. Boundary markers: None identified in the skill instructions. Capability inventory: The agent has access to theBashtool and can execute commands viauv run. Sanitization: No specific sanitization or filtering of the search results is mentioned in the skill documentation.
Audit Metadata