create-github-issues-feature-from-implementation-plan

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process implementation plans from an external file (${file}). This creates a surface for indirect prompt injection if the plan file contains malicious instructions intended to manipulate the agent's behavior when creating or updating GitHub issues.
  • Ingestion points: The skill reads the content of a file specified by the ${file} variable.
  • Boundary markers: There are no explicit instructions or delimiters to isolate the plan content from the agent's operational instructions.
  • Capability inventory: The skill utilizes create_issue, update_issue, and search_issues tools to interact with GitHub repositories.
  • Sanitization: The instructions do not specify any validation or sanitization steps for the data extracted from the plan file before it is used in issue titles or descriptions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 06:50 AM
Security Audit — agent-trust-hub — create-github-issues-feature-from-implementation-plan