github
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from external GitHub repositories (e.g., via
gh issue listandgh api). This creates a potential surface for indirect prompt injection if retrieved content like issue titles or PR bodies contains malicious instructions. - Ingestion points: GitHub API responses and CLI output processed in SKILL.md.
- Boundary markers: None explicitly defined in the prompt templates.
- Capability inventory: Execution of
ghCLI subcommands. - Sanitization: No explicit sanitization or filtering of GitHub content is observed in the skill instructions.
Audit Metadata