Confirm the source
Compare the repository, publisher, and installation command before continuing.
✓
Third-party audit
PassedGen Agent Trust Hub
copilot-usage-metrics · github/awesome-copilot
Provider summary
The skill retrieves GitHub Copilot usage metrics using the GitHub CLI. It is generally safe and uses shell best practices like variable quoting; however, it lacks input validation for user-provided parameters and does not sanitize data received from the GitHub API, which creates a surface for indirect prompt injection.
The provider classified the analyzed snapshot as NONE risk. This result applies to the content available at audit time.
- Provider
- Gen Agent Trust Hub
- Normalized result
- pass
- Risk level
- NONE
- Audited
- Feb 20, 2026
How to use this signal
Read the content
Review SKILL.md, scripts, and allowed tools. Artificial Atlas never executes them during indexing.
Limit permissions
Use the narrowest possible scope and avoid broad credentials for third-party skills.