cmd-gh-issue
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileThe skill is broadly benign and aligns with its stated purpose of turning conversation context into a GitHub issue via the gh CLI. It leverages standard GitHub API usage and CLI tooling, with typical authentication requirements. The primary risks are typical network/credential handling considerations (token exposure, misconfiguration) and potential formatting issues in the generated issue body. No evidence of malicious data exfiltration or inappropriate privilege escalation is present. Overall, a benign to moderately-risk profile due to external dependencies and credential usage, with recommended mitigations around input validation, error handling, and explicit user confirmation for repo targets and issue content.