create-issue
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
ghCLI commands to interact with GitHub repositories, includinggh issue createandgh apicalls to manage issue hierarchies. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted user input to populate GitHub issue content. • Ingestion points: User-provided descriptions and task details analyzed in Step 1 of
SKILL.md. • Boundary markers: Absent; user input is directly used to generate issue content without delimiters or instructions to ignore embedded commands. • Capability inventory:gh issue createandgh apicalls inSKILL.mdenable data modification on GitHub repositories. • Sanitization: No validation or sanitization of the input content is performed before command execution.
Audit Metadata