git-get-notification
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes data from external, untrusted sources.
- Ingestion points: Fetches content from GitHub API responses, including issue titles, pull request descriptions, and notification summaries (SKILL.md, Steps 2-4).
- Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat the fetched content as data rather than instructions.
- Capability inventory: The skill utilizes the
Bashtool to execute GitHub CLI commands. - Sanitization: No sanitization or filtering of the retrieved GitHub content is implemented before display.
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to perform operations via the GitHub CLI. - Execution details: Commands include
gh apifor data retrieval anddatefor time-based filtering. These commands are localized to the authorizedghenvironment and the predefined list of monitored repositories.
Audit Metadata