skills/github/awesome-copilot/create-github-issues-feature-from-implementation-plan/Gen Agent Trust Hub
create-github-issues-feature-from-implementation-plan
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process implementation plans from an external file (
${file}). This creates a surface for indirect prompt injection if the plan file contains malicious instructions intended to manipulate the agent's behavior when creating or updating GitHub issues. - Ingestion points: The skill reads the content of a file specified by the
${file}variable. - Boundary markers: There are no explicit instructions or delimiters to isolate the plan content from the agent's operational instructions.
- Capability inventory: The skill utilizes
create_issue,update_issue, andsearch_issuestools to interact with GitHub repositories. - Sanitization: The instructions do not specify any validation or sanitization steps for the data extracted from the plan file before it is used in issue titles or descriptions.
Audit Metadata