topic-to-issue
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (gh) to view repository information and create issues. It also utilizes local codebase tools such as Grep, Glob, and Read to establish facts during investigations.
- [EXTERNAL_DOWNLOADS]: The skill employs WebSearch and WebFetch tools to retrieve information from external websites when the topic of investigation extends beyond the local codebase.
- [PROMPT_INJECTION]: The skill processes untrusted data from web searches and repository files to generate issue titles and descriptions, creating an indirect prompt injection surface. This is mitigated by the explicit instruction to require full user confirmation before executing the gh issue create command.
Audit Metadata