create-issue

Pass

Audited by Gen Agent Trust Hub on Mar 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes gh CLI commands to interact with GitHub repositories, including gh issue create and gh api calls to manage issue hierarchies.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes untrusted user input to populate GitHub issue content. • Ingestion points: User-provided descriptions and task details analyzed in Step 1 of SKILL.md. • Boundary markers: Absent; user input is directly used to generate issue content without delimiters or instructions to ignore embedded commands. • Capability inventory: gh issue create and gh api calls in SKILL.md enable data modification on GitHub repositories. • Sanitization: No validation or sanitization of the input content is performed before command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 20, 2026, 12:06 PM