Search

github.blog › changelog

Manage agent skills with GitHub CLI - GitHub Changelog

… They are not verified by GitHub and may contain prompt injections, hidden instructions, or malicious scripts. We strongly recommend inspecting the content of skills before installation, which can be done via the gh skill preview command. …

Apr 16, 2026 · Allison

github.blog › security

How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework

… During audits, we often reuse the same prompt and task for every component, varying only the details. The seclab-taskflow-agent lets us define templated prompts, iterate through components, and substitute component-specific details as it runs. …

Mar 6, 2026 · Man Yue Mo, Peter Stöckli