inbox-search-issues
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill uses the
gh apicommand to interact with GitHub's search API. This is a standard and intended use of the GitHub CLI tool to retrieve information about repository items. - Data Handling: The skill processes information such as issue titles, labels, and status. While this data originates from external sources (GitHub repositories), the skill uses the built-in
--jqflag for data extraction, which is a secure way to parse JSON output without piping to external processes. - Indirect Prompt Injection Surface: Since the skill retrieves and displays content created by others (such as issue titles), there is a theoretical surface for indirect prompt injection. This is a standard consideration for any tool that processes user-generated content from external platforms.
Audit Metadata