youtrack-apps-skill
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by JetBrains and exclusively utilizes official vendor resources, including the
@jetbrains/create-youtrack-appand@jetbrains/youtrack-apps-toolsCLI tools, and official GitHub repositories. - [SAFE]: Data protection is prioritized in the instructions. The skill explicitly warns against printing sensitive tokens (e.g.,
YOUTRACK_TOKEN) and provides secure methods for secret management using YouTrack's built-insecretformat insettings.jsonand environmental variables. - [SAFE]: The documentation includes detailed security guidelines for developers, specifically emphasizing the need to verify object visibility using
isVisibleTo(ctx.currentUser)before returning data through custom HTTP handlers. - [SAFE]: The included GitHub Action workflows for release (
release.yml) and marketplace publication (publish-marketplace.yml) use standard, trusted actions and utilities (e.g.,actions/checkout,actions/setup-node,ghCLI) for project lifecycle management. - [SAFE]: No evidence of prompt injection, obfuscation, or unauthorized data exfiltration was found. The skill serves its primary purpose as a developer guide for the YouTrack platform.
Audit Metadata