ln-914-community-responder
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches missing documentation and reference files from the author's public repository on GitHub (levnikolaevich/claude-code-skills). This is a legitimate fallback mechanism for accessing shared reference assets.
- [COMMAND_EXECUTION]: Utilizes the GitHub CLI (gh) and standard utilities (grep, ls) to interact with repositories and inspect the local codebase. All commands are scoped to the task of community management and response generation.
- [PROMPT_INJECTION]: The skill processes untrusted content from external GitHub issues and discussions. 1. Ingestion points: GitHub discussion/issue bodies and comments fetched in Phase 1 (SKILL.md). 2. Boundary markers: Absent; instructions are structured but untrusted data is not explicitly delimited. 3. Capability inventory: Access to Bash (gh, grep, ls), Read, and WebFetch. 4. Sanitization: The risk is mitigated by a mandatory human-in-the-loop review gate, requiring explicit user approval before any generated content is published.
Audit Metadata