gh-cli
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to interact with and process data from external GitHub sources, which represents a vulnerability surface for indirect prompt injection. \n
- Ingestion points: GitHub repository metadata, pull requests, issues, and repository files accessed via
ghandgitcommands (SKILL.md). \n - Boundary markers: The skill does not provide specific instructions to the agent to treat external content as untrusted or to use specific delimiters. \n
- Capability inventory: Utilizes
gh repo view,gh pr view,gh pr list,gh issue view,gh api, andgit cloneto retrieve remote data. \n - Sanitization: No explicit validation or filtering of content retrieved from GitHub is specified in the guidance.
Audit Metadata