qa
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs its primary function of gathering bug reports and creating GitHub issues using the
ghCLI. No suspicious file access or network activity outside of the declared scope was detected. - [PROMPT_INJECTION]: Analyzed for indirect prompt injection surface due to ingestion of user reports into GitHub issue templates.
- Ingestion points: User descriptions of problems and project terminology files like
UBIQUITOUS_LANGUAGE.mdare ingested into the context viaSKILL.md. - Boundary markers: No specific delimiters or "ignore" instructions are used to separate untrusted user content from the issue creation logic.
- Capability inventory: The skill has the capability to persist data via
gh issue create. - Sanitization: No explicit sanitization or validation of user-provided descriptions is performed before the issue is generated.
Audit Metadata