github-project
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes the official GitHub CLI (
gh) to manage project items, which is the standard and authorized tool for GitHub repository administration. - [SAFE]: The instructions mandate a "read-before-write" pattern, requiring the agent to query project items using
gh project item-listbefore performing any modifications. This reduces the risk of data corruption or unauthorized overwrites. - [SAFE]: The skill explicitly restricts the agent from guessing sensitive identifiers such as Project, field, or option IDs. It requires these to be sourced from a local configuration file (
docs/agents/issue-tracker.md) or through a specific setup command (/setup-ouyangjiahong-skills), ensuring that the agent operates within a defined and user-approved scope.
Audit Metadata