github-issue-quick-create
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
gh(GitHub CLI) tool for repository interaction and issue creation. It mitigates shell injection risks by specifying the use of the--body-fileflag for issue descriptions and requiring explicit user confirmation (e.g., 'ship it') before the write operation is performed. - [DATA_EXFILTRATION]: Network activity is restricted to GitHub, a well-known service, for the purpose of creating issues in authorized repositories. No unauthorized data exfiltration patterns were observed.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local files or code when requested by the user to build issue context. The risk of the agent following instructions embedded in those files is mitigated by the mandatory draft review and approval process before any external action occurs.
Audit Metadata