github-issue
Pass
Audited by Gen Agent Trust Hub on Feb 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the gh (GitHub CLI) utility to create issues in a repository.
- [COMMAND_EXECUTION]: Standard shell commands such as cp and the system's $EDITOR are invoked to manage temporary file creation and content editing.
- [PROMPT_INJECTION]: An indirect prompt injection surface exists as the skill processes user-supplied information to populate GitHub issues intended for automated 'Codex Argo' workflows.
- Ingestion points: User input gathered during the first step of the workflow in SKILL.md.
- Boundary markers: No delimiters or explicit instructions to ignore embedded commands are included in the formatting.
- Capability inventory: The primary capability is issue creation via gh issue create.
- Sanitization: User-provided content is reused verbatim without escaping or validation filters.
Audit Metadata