open-ticket
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the official
gh(GitHub CLI) andgitcommand-line tools as documented inreferences/trackers/github.md. These tools are used to retrieve repository information, check authentication, and manage issue life cycles (view, create, and close). - [EXTERNAL_DOWNLOADS]: The skill interacts with GitHub's official infrastructure via the
ghtool to process issues. These network operations are necessary for the skill's stated purpose and target a well-known, trusted service. - [SAFE]: The skill includes a mandatory confirmation step ("Confirm once, then file") where the user must approve the ticket's title, body, and labels before the agent executes the creation command. This provides a human-in-the-loop safety check against accidental or unwanted operations.
- [PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as it ingests content from untrusted project files like
CONTRIBUTING.mdandAGENTS.md(documented inreferences/repository-conventions.md). - Ingestion points: Reads
CONTRIBUTING.md,.github/CONTRIBUTING.md, andAGENTS.mdto identify project-specific ticket conventions. - Boundary markers: Absent; the skill reads file content and applies instructions found within to the current task.
- Capability inventory: The skill has the capability to execute
gh issue createandgh issue closevia thereferences/trackers/github.mdreference file. - Sanitization: Absent; however, the impact is mitigated by the mandatory user confirmation step before any action is taken.
Audit Metadata