issue-progress-tracking

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash environment to execute standard git and gh (GitHub CLI) commands. These operations are used solely to manage local repository state (branching, committing) and remote issue metadata (labels, comments, pull requests). This is consistent with the skill's stated purpose of workflow automation.
  • [DATA_EXFILTRATION]: No unauthorized data access or network exfiltration was detected. The skill interacts only with the user's configured GitHub repositories through the authenticated gh tool, which is a well-known service for developer workflows.
  • [PROMPT_INJECTION]: The instructions do not contain any patterns typical of prompt injection or bypass attempts. There are no instructions to ignore safety filters, reveal system prompts, or assume unrestricted roles.
  • [REMOTE_CODE_EXECUTION]: The skill does not download or execute remote scripts. It relies on locally installed tools (git, gh) and does not use curl or wget to fetch and pipe content to a shell.
  • [EXTERNAL_DOWNLOADS]: No external dependencies or remote packages are requested for installation. The skill operates using the tools already expected to be in the developer's environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 04:27 PM