ghpm-issue
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the gh and git CLI tools to perform actions like creating issues, listing labels, and updating project boards. These operations are consistent with the skill's purpose as a GitHub project manager.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided titles and bodies for GitHub issues and incorporates them into shell commands. This creates a surface for potential injection if inputs are not sanitized, though this is a common pattern for CLI-wrapper skills.
- Ingestion points: User-supplied title and body arguments in SKILL.md.
- Boundary markers: None explicitly defined for the interpolation of user strings into CLI commands.
- Capability inventory: Uses Bash(gh:) for network operations and state changes on GitHub, and Bash(git:) for repository interactions.
- Sanitization: No instructions are present in the skill to escape or sanitize user input before it is passed to the shell command.
Audit Metadata