qa
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gh issue createcommand to programmatically generate GitHub issues. This is the intended behavior for an issue-reporting agent and relies on the user's existing GitHub CLI configuration. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection because it processes untrusted data from the user and the codebase.
- Ingestion points: User-provided bug descriptions in a conversational format and codebase content retrieved by the
Exploresubagent (SKILL.md). - Boundary markers: The instructions do not specify the use of delimiters or boundary markers when interpolating user input into the issue template.
- Capability inventory: The skill possesses the ability to perform external writes via the
gh issue createcommand. - Sanitization: There is no evidence of input validation or sanitization before user-provided text is passed to the issue creation tool.
Audit Metadata