file-issue
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gh issue createandgh label createshell commands to interact with GitHub repositories. These commands are the core functionality of the skill, used to programmatically file tickets and ensure the presence of required status labels (status:readyandinbox). - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user conversation to populate the title and body of GitHub issues. This creates a surface for indirect prompt injection, though the impact is localized to issue metadata.
- Ingestion points: User conversation history and specific requests (referenced in SKILL.md).
- Boundary markers: None identified in the prompt templates.
- Capability inventory: The skill has the ability to execute
ghCLI commands to create issues and labels (SKILL.md). - Sanitization: No explicit sanitization or escaping of the user-provided text is specified before it is passed to the issue creation command.
Audit Metadata