cli-gh
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several shell scripts designed to automate developer workflows through command execution.
- Evidence:
auto-pr-create.sh,issue-triage.sh,release-automation.sh, andworkflow-monitor.shexecutegh,git, and build/test tools includingnpm,make, andpytest. - [DATA_EXFILTRATION]: The skill provides guidance on managing local files associated with GitHub authentication and security.
- Evidence:
references/advanced-features.mdincludes instructions for adding SSH public keys from~/.ssh/id_ed25519.pubto a GitHub account. - Evidence:
references/troubleshooting.mddemonstrates authenticating with the CLI using tokens stored in a localtoken.txtfile. - [PROMPT_INJECTION]: An automated triage script processes untrusted external data, creating a surface for indirect prompt injection.
- Ingestion points: Issue titles and bodies are fetched from the GitHub API in
examples/issue-triage.sh. - Boundary markers: None; the script processes fetched content directly using
grepandjq. - Capability inventory: The script performs resource management actions including labeling (
gh issue edit --add-label) and assigning issues (gh issue edit --add-assignee). - Sanitization: Content is parsed as structured JSON using
jqprior to keyword matching, which provides basic data integrity but does not sanitize against instructional content.
Audit Metadata