create-github-issues
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the GitHub CLI (gh) for repository management, including listing/creating labels and creating issues. This interaction with a well-known service is handled via standard bash commands which are the intended functionality of the tool.
- [PROMPT_INJECTION]: The skill processes external data (findings) to populate issue content, creating a surface for indirect prompt injection.
- Ingestion points: The findings input parameter in SKILL.md.
- Boundary markers: None explicitly defined in the instructions to separate input data from instructions.
- Capability inventory: The skill uses the Bash tool to execute gh commands for issue and label management.
- Sanitization: Employs quoted heredocs ('EOF') in shell commands to ensure that findings are treated as literal strings, effectively preventing command injection.
Audit Metadata