diagnose-ci-failures
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
git branchand thegh(GitHub CLI) tool to programmatically inspect the state of the local repository and fetch metadata about GitHub Pull Requests. - [COMMAND_EXECUTION]: Retrieves CI failure logs using
gh run view --log-failed, which is a standard and safe operation for troubleshooting automated builds. - [DATA_EXFILTRATION]: No evidence of sensitive data exfiltration or unauthorized network operations was found. The skill interacts solely with the local git environment and the official GitHub API via the
ghCLI. - [PROMPT_INJECTION]: The skill processes external data (CI logs) which constitutes an indirect prompt injection surface. However, the instructions prioritize creating a human-readable plan over direct code execution, which acts as a safety boundary for the agent's actions.
Audit Metadata