create-issue-himarket
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
ghcommand-line tool to automate issue creation within thehigress-group/himarketrepository. This functionality is aligned with the skill's stated purpose and interacts with the developer's own repository. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to generate shell commands.
- Ingestion points: User descriptions collected during the workflow in
SKILL.md. - Boundary markers: The command template uses quoted heredocs (
<<'EOF') to delimit user content. - Capability inventory: Execution of
gh issue createas shown inSKILL.md. - Sanitization: The use of single-quoted heredocs prevents the shell from evaluating variables or commands within the user-provided text.
Audit Metadata