sync-issue-templates
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes template content fetched from an external source (the organization's .github repository).
- Ingestion points: Data is retrieved from remote GitHub API endpoints in SKILL.md (Steps 3 and 4).
- Boundary markers: The skill features a human-in-the-loop confirmation process, requiring the agent to show templates and configuration diffs to the user before writing.
- Capability inventory: The skill has the ability to write files to the .github/ISSUE_TEMPLATE/ directory using standard filesystem operations.
- Sanitization: The skill aims to preserve template content exactly as found in the source; the user confirmation step serves as the primary safeguard against malicious content.
- [COMMAND_EXECUTION]: The skill executes gh CLI commands to interact with GitHub's API. These commands are scoped to repository metadata retrieval and content fetching, which is consistent with the skill's stated purpose of managing issue templates.
Audit Metadata