github-issue-query
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
query-issues.shexecutes the GitHub CLI (gh) andjq. - It properly quotes all variables (e.g.,
"$STATE","$LIMIT","$JQ_FILTER") to prevent shell injection or word splitting vulnerabilities. - The shell command is restricted to listing issues (
gh issue list) and does not perform any write operations or administrative changes. - Input parameters like
--limitand--stateare passed directly to theghcommand which handles its own argument validation.
Audit Metadata