setup-github-labels
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common shell utilities including gh, jq, sort, and comm to interact with GitHub APIs and perform local data processing. These operations are scoped to repository metadata management.
- [INDIRECT_PROMPT_INJECTION]: The skill processes existing repository labels and documentation content to maintain state and preserve custom overrides.
- Ingestion points: Output from gh label list and contents of docs/agents/triage-labels.md.
- Boundary markers: Not explicitly implemented.
- Capability inventory: Shell command execution via gh CLI and file system write access for documentation updates.
- Sanitization: Employs jq for safe parsing of label data, mitigating standard injection risks during command construction.
Audit Metadata