issue-progress-tracking
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash environment to execute standard
gitandgh(GitHub CLI) commands. These operations are used solely to manage local repository state (branching, committing) and remote issue metadata (labels, comments, pull requests). This is consistent with the skill's stated purpose of workflow automation. - [DATA_EXFILTRATION]: No unauthorized data access or network exfiltration was detected. The skill interacts only with the user's configured GitHub repositories through the authenticated
ghtool, which is a well-known service for developer workflows. - [PROMPT_INJECTION]: The instructions do not contain any patterns typical of prompt injection or bypass attempts. There are no instructions to ignore safety filters, reveal system prompts, or assume unrestricted roles.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute remote scripts. It relies on locally installed tools (
git,gh) and does not usecurlorwgetto fetch and pipe content to a shell. - [EXTERNAL_DOWNLOADS]: No external dependencies or remote packages are requested for installation. The skill operates using the tools already expected to be in the developer's environment.
Audit Metadata