github-issue-planner
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- COMMAND_EXECUTION (LOW): The skill uses the
Bashtool to executeghCLI commands such asgh issue create. User-provided content, including issue titles and descriptions, is interpolated into these shell commands. While the templates suggest double-quoting, there are no instructions for the agent to escape shell metacharacters, which could allow a malicious user to attempt arbitrary command execution via crafted input. - PROMPT_INJECTION (LOW): The skill is susceptible to Indirect Prompt Injection (Category 8) because it processes untrusted user data and possesses significant capabilities like shell access. Ingestion points: User input gathered via the
AskUserQuestiontool or general chat context. Boundary markers: Absent; no specific delimiters are defined to isolate user input from agent instructions. Capability inventory:Bash,ghCLI (with repository write access),Grep,Glob. Sanitization: Absent; the instructions do not require the agent to validate, sanitize, or escape user-provided strings before they are incorporated into executable commands.
Audit Metadata