ghpm-issue
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes GitHub CLI (gh) and Git (git) commands to manage issues, labels, and project boards.
- [EXTERNAL_DOWNLOADS]: Interacts with GitHub's GraphQL and REST APIs via the gh tool. GitHub is recognized as a well-known service.
- [PROMPT_INJECTION]: The skill processes input from local configuration files and session data. * Ingestion points: Reads repository lists and project IDs from .ghpm/config.json and branch names from files in .ghpm/sessions/. * Boundary markers: Relies on structured JSON parsing from local files. * Capability inventory: Includes issue creation and project board mutation via gh CLI. * Sanitization: Example commands use double quotes for variable interpolation.
Audit Metadata