plan-to-tickets
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious behavior, obfuscation, or unauthorized data exfiltration patterns were detected in the skill's instructions or scripts.
- [COMMAND_EXECUTION]: The skill executes a local bash script (
scripts/create-tickets.sh) which calls the GitHub CLI (gh). These operations are well-documented, restricted to project issue management, and employ security best practices such as usingjqfor JSON handling and shell array expansion for command arguments to prevent injection. - [PROMPT_INJECTION]: The skill processes external repository files to generate GitHub issue content. While this creates an indirect injection surface, the risk is mitigated by the skill's specific focus on issue creation and the use of structured processing via the provided bash script, which prevents arbitrary command execution from the input data.
Audit Metadata