report-framework-issue
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Public Disclosure Scrubbing: The skill features a mandatory redaction step to ensure that sensitive information—including PII, credentials, and internal network endpoints—is removed before a report is filed to a public repository.
- Prompt Injection Safeguards: Instructions specifically mandate that external data, such as error logs or existing issue text, be treated as untrusted data rather than instructions, helping to prevent unauthorized agent behavior.
- Human-in-the-Loop Verification: Final submission requires explicit confirmation and utilizes web-based tools to ensure that the user performs a final manual review before any data is published.
- Localized Environment Verification: The skill utilizes local pre-flight checks to verify framework configuration, ensuring that reports are filed with accurate versioning information without requiring broad system access.
Audit Metadata