issue
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gh issue createcommand to interact with the repository's issue tracker. This is a standard and expected operation for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill accepts a user-provided description as an argument to generate the issue's title and body. While the instructions guide the agent to 'draft' the content (placing the AI as a filter), processing untrusted user input to generate command arguments presents a minor surface for indirect prompt injection.
Audit Metadata