check
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes various command-line utilities to manage repository state and interact with the GitHub API through the
ghCLI. Evidence includes the use ofgit status,git log,gh issue list, andgh pr viewfor automated triage and review workflows.- [REMOTE_CODE_EXECUTION]: The agent is designed to execute locally-defined test scripts and implementation plans to verify code quality. Evidence is found in thescripts/run-tests.shfile, which auto-detects and triggers standard test runners such asnpm test,cargo test,make test, orpytest.- [EXTERNAL_DOWNLOADS]: Standard package management tools used by the skill may initiate network requests to download dependencies or binaries from official registries during the verification process. Evidence includes the use ofnpxand other package manager commands within the testing scripts.- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it ingests and acts upon untrusted data from repository sources. Ingestion points: The skill readsgit diffoutput,gh issue/prcontent, and project files likeREADMEandAGENTS.md. Boundary markers: No explicit delimiters are used to isolate untrusted data from instructions. Capability inventory: The skill can execute shell commands, modify files (via commits), and perform GitHub API actions. Sanitization: No explicit sanitization or filtering of external content is documented in the skill instructions.
Audit Metadata