prds-get
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) to fetch issue data. This is a standard and expected use of a well-known command-line tool for project management.- [PROMPT_INJECTION]: The skill ingests untrusted content from GitHub issue metadata, creating an indirect prompt injection surface. - Ingestion points: Issue titles and descriptions fetched via
gh issue listinSKILL.md. - Boundary markers: Absent. There are no clear delimiters or instructions to ignore potential commands within the issue content.
- Capability inventory: Local command execution via the
ghtool. - Sanitization: Absent. The skill presents the fetched data directly in the output without filtering or escaping.
Audit Metadata