create-issues
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses the dynamic context injection syntax (
!command) to retrieve repository metadata such as current branch, git status, and open issue lists upon loading. These commands are hardcoded, do not process external input, and are restricted to informational status checks that do not pose a security risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local repository, including existing issues and contributing guidelines. This ingestion point allows external content to enter the agent's context, which is a common characteristic of development-oriented skills. The potential for malicious influence is mitigated by the skill's focused purpose and the use of specialized CLI tools for issue management.
Audit Metadata