managing-youtrack
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security concerns were identified during the analysis of this skill. The implementation follows several security best practices:
- Credential Security: Authentication is handled using the YOUTRACK_TOKEN environment variable, which prevents sensitive credentials from being exposed in plain text or hardcoded in scripts.
- Command Injection Prevention: The skill explicitly instructs the agent to use --data-urlencode for search queries, which mitigates the risk of shell command injection when processing user-provided strings.
- Standard Functionality: All API operations and data access patterns (such as retrieving user details and modifying issues) are consistent with the primary purpose of managing a YouTrack instance and utilize the toolset appropriately without signs of malicious intent or unauthorized data access.
Audit Metadata