closing-obsolete-issues
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs repository maintenance tasks on the
flutter/devtoolsrepository using the official GitHub CLI (gh). All scripts and instructions are scoped to this specific, trusted repository. - [SAFE]: The skill implements a robust 'Safety Rule' in the
SKILL.mdinstructions, explicitly directing the agent not to close issues based solely on age or screen updates without verifying the specific bug behavior. - [SAFE]: A critical mandate requires the agent to present all drafted closing comments and issue URLs to the user for explicit approval before any destructive actions (closing issues) are taken.
- [COMMAND_EXECUTION]: The skill uses
Process.runin Dart and shell scripts to executeghcommands. These are used for read-only operations (searching/viewing) and controlled write operations (closing with comments) following user approval. The logic is consistent with the skill's stated administrative purpose. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from GitHub issue descriptions and comments. However, it mitigates risk by requiring human review of all generated output before it is posted back to GitHub. The 'Style Constraint' against em dashes is a specific formatting rule, not a security bypass.
Audit Metadata