github-issue-creator
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements standard developer workflows for creating GitHub issues. It does not attempt to access sensitive system files, environment variables, or private credentials.
- [COMMAND_EXECUTION]: The skill uses the official GitHub CLI (
gh). It includes a critical security best practice by instructing the agent to use temporary files with the--body-fileflag instead of passing raw text directly as a command-line argument. This approach prevents shell injection vulnerabilities and ensures special characters in user input are not misinterpreted by the shell. - [SAFE]: The skill processes repository configuration data from the
.github/ISSUE_TEMPLATE/directory. - Ingestion points: Reads local YAML and Markdown template files from the repository where it is deployed.
- Boundary markers: The workflow instructs the agent to map specific user inputs to fields defined within the template schemas.
- Capability inventory: Limited to reading local files, writing temporary files, and executing the
ghtool for issue submission. - Sanitization: Input is sanitized through file-based buffering before CLI execution, ensuring the issue content is treated as data rather than executable code.
Audit Metadata