git-create-repo
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) through the Bash tool to perform repository creation and cloning operations. - [INDIRECT_PROMPT_INJECTION]: The skill has a vulnerability surface where user-provided repository names and descriptions are interpolated directly into shell commands. 1. Ingestion points: The
<repo-name>and description parameters provided by the user in SKILL.md. 2. Boundary markers: None present to delimit user input or prevent command injection. 3. Capability inventory: Use of Bash to executegh repo createandgh repo clone. 4. Sanitization: No evidence of input validation or shell-escaping logic for the interpolated variables.
Audit Metadata