bensz-collect-bugs
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
ghCLI tool and various version-check commands (e.g.,python3 --version,git --version,node --version) usingsubprocess.runto collect environment metadata. These commands are executed as lists with fixed arguments, which is a safe practice that prevents shell injection. - [DATA_EXFILTRATION]: Bug reports and environment snapshots are uploaded to the
huangwb8/bensz-bugsrepository on GitHub via thegh api. This is a documented feature and the skill includes comprehensive sanitization logic inscripts/common.pythat redacts secrets (e.g.,sk-,ghp_), email addresses, identity numbers, and private directory paths (/Users/,/home/) from all submitted text. - [EXTERNAL_DOWNLOADS]: The script requires the installation of the
pyyamlPython package to process theconfig.yamlfile. This is a standard and verifiable dependency.
Audit Metadata