edit-issues
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard CLI tools (
tea,jq) for their intended purpose of managing repository issues. - [COMMAND_EXECUTION]: The skill demonstrates legitimate use of shell commands to interact with issue trackers. These include bulk operations using pipes,
jq, andxargs, which are standard workflows for repository maintenance. - [DATA_INDIRECT_INJECTION]: In the bulk edit example, the skill processes issue indices retrieved from a remote server. While this represents an ingestion point for untrusted data, the command uses
jq -r '.[].index'to specifically extract the numerical issue index, which serves as an effective sanitization step before passing the values toxargs.
Audit Metadata