report-issue

Pass

Audited by Gen Agent Trust Hub on Apr 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [Command Execution]: The skill executes a local script (check-version.js) using Node.js to verify the plugin version. This is a routine operation used to ensure compatibility and provide version-specific feedback to the user before proceeding with an issue report.
  • [Indirect Prompt Injection Surface]: The skill ingests user-supplied descriptions and follows instructions from an external workflow file. While this ingestion of external data is a standard pattern for issue reporting tools, it serves as a surface where external content could influence agent behavior. This is mitigated by the skill's intended scope of reporting bugs to a defined GitHub repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 21, 2026, 11:57 AM