qa
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gh issue createCLI command to file bugs on GitHub. This is the intended primary function of the skill and uses the platform's authorized tools. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface (Category 8) because it ingests untrusted user descriptions and interpolates them into GitHub issue templates.
- Ingestion points: User descriptions provided during the interactive QA session (SKILL.md).
- Boundary markers: None identified; the skill does not explicitly use delimiters or instructions to ignore embedded commands in user input.
- Capability inventory: Uses
gh issue createto write data to an external service (GitHub). - Sanitization: No explicit sanitization or validation of user-provided text is performed before it is passed to the issue creation tool.
Audit Metadata