issue-analyze
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted content from GitHub issue titles, bodies, and comments using the
gh issue viewcommand. This creates a surface for indirect prompt injection where malicious instructions embedded in an issue could attempt to influence the agent's behavior. - Ingestion points: GitHub issue content fetched via
gh issue viewin SKILL.md. - Boundary markers: The workflow does not specify markers to isolate external issue content from agent instructions.
- Capability inventory: Authorized use of
gitandghCLI tools via the Bash tool. - Sanitization: No explicit sanitization of issue data is performed before processing.
- [COMMAND_EXECUTION]: The skill utilizes Bash tools restricted to
git:*andgh:*commands to retrieve issue data and repository history. This is part of the core functionality but involves executing shell commands based on user-provided issue numbers.
Audit Metadata