open-source-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlor theghCLI to interact with the GitHub API to fetch repository metadata. These commands are appropriately scoped and include instructions to use theGITHUB_TOKENenvironment variable for authenticated requests to avoid rate limits.\n- [PROMPT_INJECTION]: The skill processes untrusted text from external sources such as GitHub repository READMEs, issue trackers, and pull request descriptions. This creates a surface for indirect prompt injection where a malicious repository could include instructions to influence the agent's report. However, given the skill's restricted capabilities (only generating a report output), this represents a low-risk scenario inherent to the tool's primary function.
Audit Metadata