report-issue
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system utilities including uname, git, and the gh (GitHub CLI) to collect environment data and manage issues. These operations are restricted to the skill's stated purpose and are performed with user oversight via confirmation prompts.
- [DATA_EXFILTRATION]: System metadata such as OS platform, terminal type, and git status is transmitted to GitHub during issue creation. The skill proactively mitigates privacy risks by redacting API keys, tokens, and credential-bearing git remote URLs from the generated content before transmission to the well-known service.
- [PROMPT_INJECTION]: The skill processes conversation context and issue lists (Ingestion points) which may contain untrusted data. It addresses the risk of Indirect Prompt Injection through mandatory user review via the AskUserQuestion tool (Boundary marker) before any issue is created (Capability). Additionally, it implements automated sanitization by scrubbing known credential patterns from the payload.
- [EXTERNAL_DOWNLOADS]: The skill's README provides standard installation instructions using npx or apm to fetch content from the author's GitHub repository.
Audit Metadata