skills/chanmuzi/git-conventions/issue/Gen Agent Trust Hub

issue

Pass

Audited by Gen Agent Trust Hub on Mar 31, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes GitHub CLI commands (gh issue, gh label) via Bash to manage repository resources. It follows security best practices by using quoted heredocs ('EOF') for the issue body, which prevents shell variable expansion or command substitution from user-provided context.
  • [DATA_EXFILTRATION]: No patterns of unauthorized data access or exfiltration were found. The skill only interacts with GitHub through the official CLI tool as intended by its primary purpose.
  • [PROMPT_INJECTION]: There are no instructions that attempt to bypass safety filters, extract system prompts, or override the agent's core behavioral constraints.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 31, 2026, 12:19 PM
Security Audit — agent-trust-hub — issue