github-issues
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the official GitHub CLI (
gh) for repository operations such as creating, viewing, and updating issues. This is a standard and expected tool for the skill's stated purpose. - [SAFE]: The skill processes data from external GitHub issues (titles, bodies, and comments), which represents an indirect prompt injection surface. This risk is effectively mitigated by mandatory human-in-the-loop confirmation instructions before any state-changing operations are performed.
- Ingestion points: External data enters the context via
gh issue view,gh issue list, andgh search issuescommands (SKILL.md). - Boundary markers: No explicit delimiters are specified for retrieved content.
- Capability inventory: The skill possesses write capabilities including
gh issue create,gh issue edit, andgh issue comment(SKILL.md). - Sanitization: No explicit sanitization or filtering of issue content is mentioned.
Audit Metadata