evanflow-qa
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI tool to file bug reports. It constructs the command using a quoted shell heredoc (cat <<'EOF'), which effectively prevents shell injection or unintended variable expansion from the user-supplied issue content.
- [SAFE]: The skill enforces a strict human-in-the-loop policy, explicitly instructing the agent to always seek user confirmation before executing any commands that interact with external services like GitHub.
- [SAFE]: Data minimization is practiced by prohibiting the inclusion of specific file paths or line numbers in the generated issue bodies, reducing the potential for exposing internal repository details.
Audit Metadata