skills/prefecthq/fastmcp/review-issue/Gen Agent Trust Hub

review-issue

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security threats detected. The skill follows its stated purpose of issue triage and PR management.\n- [COMMAND_EXECUTION]: Uses legitimate GitHub CLI (gh) commands (issue view, pr view, pr list, issue edit, issue comment) to interact with repository metadata. The commands target a specific repository (PrefectHQ/fastmcp) associated with the author's ecosystem.\n- [DATA_EXPOSURE]: Accesses public repository data using standard GitHub API calls. No sensitive local files, environment variables, or hardcoded credentials are involved.\n- [PROMPT_INJECTION]: The skill processes untrusted input from external contributors via issue and PR descriptions. It mitigates potential injection risks by instructing the agent to treat external comments as leads rather than conclusions and by mandating the use of --body-file for comments to avoid shell-level variable or command interpolation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 02:15 PM
Security Audit — agent-trust-hub — review-issue