git-issue-manage
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
ghandgitcommand-line tools to perform legitimate issue and repository management tasks. These include administrative actions like locking threads, pinning issues, and creating linked development branches. - [DYNAMIC_CONTEXT_INJECTION]: Uses the
!command syntax inSKILL.mdto rungit remote get-url originandgh issue listwhen the skill is loaded. These commands are used solely to provide necessary context about the current repository and its open issues to the agent. - [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by ingesting data from GitHub issues (titles and metadata).
- Ingestion points: The Context section and validation steps in
SKILL.mdread external data from GitHub via theghCLI. - Boundary markers: No specific boundary markers are employed to isolate the ingested issue content from the agent's instructions.
- Capability inventory: The skill can modify issues, create branches, and execute arbitrary GitHub API calls via the
ghtool. - Sanitization: External content is not sanitized before being presented to the agent, which is standard for this type of development tool.
Audit Metadata