issue
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the GitHub CLI to search for existing issues to prevent duplicates.
- Evidence: Executes
gh issue list --search "<keywords>" --state all --limit 20andgh search issuesin the shell. - [PROMPT_INJECTION]: The skill processes data from external sources (existing GitHub issues) and local repository files which could theoretically contain malicious instructions.
- Ingestion points: Repository issue templates located in
.github/ISSUE_TEMPLATE/and search results returned by theghcommand. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content within templates or existing issues.
- Capability inventory: The agent has access to the
create_issuetool and shell execution forghcommands. - Sanitization: No specific filtering or validation of the ingested external content is mentioned.
Audit Metadata