inbox-add-reaction
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution via Official Tooling: The skill employs the
gh(GitHub CLI) tool to execute API requests. This is a standard and expected method for interacting with GitHub services in a developer environment. - Dynamic Argument Interpolation: The instructions use placeholders such as
{owner},{repo}, and{number}to build a shell command. While this is the intended way to use the skill, it represents a security consideration where the underlying agent platform must ensure that user-provided values are properly handled to prevent unintended shell character interpretation.
Audit Metadata