oh-plan
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs repository management operations using the official GitHub CLI (
gh), which is a well-known service tool appropriate for its described functionality. - [SAFE]: Local file system interactions are limited to the project's
.oh/directory for reading and updating session context, ensuring data is kept within the expected project scope. - [SAFE]: The construction of GitHub issue bodies uses shell heredocs (
cat <<'EOF'), which is a secure practice to prevent shell expansion or injection when handling multi-line strings. - [SAFE]: Codebase exploration relies on platform-provided tools such as
repo_mapandsearch, adhering to safe grounding practices without using unauthorized or high-risk command execution.
Audit Metadata