report-issue
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [Command Execution]: The skill executes a local script (
check-version.js) using Node.js to verify the plugin version. This is a routine operation used to ensure compatibility and provide version-specific feedback to the user before proceeding with an issue report. - [Indirect Prompt Injection Surface]: The skill ingests user-supplied descriptions and follows instructions from an external workflow file. While this ingestion of external data is a standard pattern for issue reporting tools, it serves as a surface where external content could influence agent behavior. This is mitigated by the skill's intended scope of reporting bugs to a defined GitHub repository.
Audit Metadata