skills/evanklem/evanflow/evanflow-qa/Gen Agent Trust Hub

evanflow-qa

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI tool to file bug reports. It constructs the command using a quoted shell heredoc (cat <<'EOF'), which effectively prevents shell injection or unintended variable expansion from the user-supplied issue content.
  • [SAFE]: The skill enforces a strict human-in-the-loop policy, explicitly instructing the agent to always seek user confirmation before executing any commands that interact with external services like GitHub.
  • [SAFE]: Data minimization is practiced by prohibiting the inclusion of specific file paths or line numbers in the generated issue bodies, reducing the potential for exposing internal repository details.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 11:33 AM