gentle-ai-issue-creation
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from GitHub repositories to create and triage issues, creating a surface for embedded instructions to influence agent behavior. * Ingestion points: The skill reads repository metadata, issue templates (YAML and Markdown), contribution guides (CONTRIBUTING.md), and existing issue lists/details via the GitHub CLI. * Boundary markers: Implements strict human authorization gates for all remote operations and specific host/repository destinations. It uses structured YAML form schemas to strictly map answers to declared controls rather than accepting arbitrary input. * Capability inventory: The skill possesses the capability to create issues, view issue details, and read repository labels using
gh issue create,gh issue view, andgh api. * Sanitization: Requires a mandatory privacy scan and redaction of the final issue body immediately before publication to replace sensitive strings such as credentials, private hostnames, and home paths with placeholders. - [COMMAND_EXECUTION]: The skill executes local commands and interacts with remote APIs via the GitHub CLI (
gh) andgit. * Evidence: It usesgh auth status,gh repo view,gh issue list, andgh issue createto perform discovery and mutations. It also usesgitcommands for repository path resolution andmktempfor secure temporary file handling withumask 077.
Audit Metadata