pr-link-issue
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes GitHub CLI (
gh) commands to retrieve metadata from issues and PRs and to update PR bodies. This usage is consistent with its stated purpose.\n- [SAFE]: The skill processes external data (GitHub issue comments) using secure methods. It applies a strict regular expression ([a-z]+-[0-9]+) to extract ticket IDs and utilizes a quoted heredoc (<<'EOF') to ensure that appended content cannot be interpreted as shell commands, protecting against indirect injection attacks (Category 8). Analysis: (1) Ingestion point:gh issue viewcomments in SKILL.md. (2) Boundary markers: None. (3) Capability:gh pr editin SKILL.md. (4) Sanitization: Regex filtering and shell escape via quoted heredoc.
Audit Metadata