arkiv-feedback

Pass

Audited by Gen Agent Trust Hub on May 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the gh (GitHub CLI) tool to check authentication status (gh auth status) and create issues (gh issue create). These commands are limited to the vendor's specific repository (Arkiv-Network/reported-issues) and require explicit user confirmation before execution.
  • [DATA_EXFILTRATION]: While the skill submits data to a public GitHub repository, this is its primary intended function. The skill mitigates accidental data exposure by requiring a full preview and confirmation from the user, and by instructing the agent to redact common secrets (private keys, mnemonics) found in user-provided logs.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input (bug descriptions, logs) and incorporates it into a drafted issue body. This surface is mitigated by the structured markdown template and the mandatory human-in-the-loop confirmation step before any submission occurs.
Audit Metadata
Risk Level
SAFE
Analyzed
May 12, 2026, 09:00 PM