issue-investigation
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution for Triage: The skill utilizes standard tools such as the GitHub CLI (
gh) and the .NET toolchain to gather issue context and prepare reproduction environments. These operations are performed to facilitate technical investigation and are typical for the developer workflows supported by this vendor. - PII and Secret Scrubbing: The instructions explicitly mandate the removal of personally identifiable information (PII) and sensitive data—such as local usernames, machine names, and access tokens—before any information is shared externally. This practice protects the user's environment from accidental exposure.
- User-in-the-Loop Validation: All actions involving network side effects, such as posting comments or updates to GitHub, require explicit user approval. This ensures that the agent does not perform automated external operations without oversight.
- Data Ingestion Management: While the skill processes content from external GitHub issues, it does so by retrieving structured data via the GitHub API. The risk associated with untrusted data is mitigated by the requirement for human review and the focus on evidence-based reproduction rather than automatic execution of reported snippets.
Audit Metadata