watch-ci-after-push
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development tools, specifically git and the GitHub CLI (gh), to resolve commit SHAs and fetch CI run information. Evidence includes calls to
git rev-parse HEADinSKILL.mdandscripts/watch-ci.mts, andgh repo viewinscripts/wait-for-pr-event.mts. - [EXTERNAL_DOWNLOADS]: The skill facilitates the download of its own source files from its official GitHub repository for installation and configuration purposes. The
README.mdfile provides installation commands targeting thegithub.com/Vivswan/skillsrepository. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data by fetching CI logs and Pull Request comments/reviews, creating an ingestion surface for potentially malicious instructions embedded in external content.
- Ingestion points:
scripts/watch-ci.mtsretrieves CI job logs viagh run view --log-failed, andscripts/wait-for-pr-event.mtsmonitors PR comments and reviews using GraphQL queries. - Boundary markers: The skill's instructions in
SKILL.mddirect the agent to report fetched content but do not specify the use of delimiters or instruction-bypass warnings to mitigate risks from data content. - Capability inventory: The skill operates within an environment capable of executing shell commands and accessing the file system via the Bun runtime.
- Sanitization: External content from logs and comments is reported to the agent as excerpts without specific sanitization or filtering of instruction-like patterns.
Audit Metadata