generate-gh-issue
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Employs the system shell to execute
ghCLI andgitcommands for repository introspection, label creation, and issue management. - [COMMAND_EXECUTION]: Uses
mktempandrmfor secure handling of temporary files during the issue generation process. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by reading untrusted data from the repository (e.g., existing issue titles, commit messages, and configuration files) to inform its architectural analysis.
- Ingestion points:
SKILL.mdreads file contents (e.g.,package.json,README.md), existing issue metadata, and commit logs. - Boundary markers: No explicit delimiters are used when interpolating repository content into analysis prompts.
- Capability inventory: Shell execution capability via the
ghandgitcommand-line tools. - Sanitization: No explicit sanitization or escaping of the ingested data is described before it is used to generate the issue title or body content.
Audit Metadata