creating-issues
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python scripts (
detect-scope.py,issue-helpers.py,validate-issue-title.py) that call the GitHub CLI (gh) and Git via thesubprocessmodule. These operations are used to fetch repository configuration and programmatically create issues. - [COMMAND_EXECUTION]: Command execution is implemented using list-based arguments for
subprocess.runrather than shell strings, which effectively prevents shell injection vulnerabilities. - [SAFE]: Data access is limited to local repository metadata and configuration files like
env.json. No evidence of unauthorized data exposure, external exfiltration, or hardcoded credentials was found. - [SAFE]: The skill does not perform any external downloads or remote code execution, relying entirely on local scripts and standard system tools.
Audit Metadata