git-get-notification

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes data from external, untrusted sources.
  • Ingestion points: Fetches content from GitHub API responses, including issue titles, pull request descriptions, and notification summaries (SKILL.md, Steps 2-4).
  • Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat the fetched content as data rather than instructions.
  • Capability inventory: The skill utilizes the Bash tool to execute GitHub CLI commands.
  • Sanitization: No sanitization or filtering of the retrieved GitHub content is implemented before display.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to perform operations via the GitHub CLI.
  • Execution details: Commands include gh api for data retrieval and date for time-based filtering. These commands are localized to the authorized gh environment and the predefined list of monitored repositories.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 10:32 PM
Security Audit — agent-trust-hub — git-get-notification