github
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains no evidence of malicious code, obfuscation, or unauthorized data access. It serves as a legitimate utility for interacting with GitHub via the gh CLI.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for interacting with external, untrusted content from GitHub resources.
- Ingestion points: Content retrieved from pull requests, workflow runs, and issues via commands like gh pr, gh run, and gh issue in SKILL.md.
- Boundary markers: Not specified.
- Capability inventory: Reading and viewing GitHub resource details.
- Sanitization: Not specified in the skill instructions.
Audit Metadata