configure-repository-governance
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and audits untrusted repository governance files.
- Ingestion points: Reads CODEOWNERS and issue templates from .github/, root, and docs/ directories.
- Boundary markers: Instructions specify using provider-native syntax and official documentation as the source of truth.
- Capability inventory: Performs file reads and writes for repository governance configuration.
- Sanitization: Explicitly instructs the agent to avoid requesting secrets and to distinguish documented policy from actual enforcement.
Audit Metadata