triage-issues
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution via CLI]: The skill utilizes
ghCLI commands to list, edit, and comment on issues, and usesnpxto runplaywright-clifor bug validation. These are standard developer operations within the context of issue management. - [External Resource Interaction]: Reproduction validation involves visiting external URLs (e.g., StackBlitz, CodeSandbox) using a headless browser. This is a functional requirement for verifying reports, and the skill includes cleanup logic to terminate associated processes.
- [Indirect Prompt Injection Surface]: The skill ingests issue titles, bodies, and comments from GitHub as untrusted data. While it lacks explicit boundary markers or sanitization, it restricts repository modifications and browser interactions through a mandatory 'recommend-then-apply' workflow. This human-in-the-loop requirement ensures that an operator reviews all proposed actions before they are executed.
Audit Metadata