release-create-tracker-issue

Pass

Audited by Gen Agent Trust Hub on Jun 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • External Content Processing: The skill uses WebFetch to retrieve milestone dates from release announcements on dev-discuss.pytorch.org. While processing external data always requires caution to avoid indirect prompt injection, this skill follows security best practices by requiring the agent to show the generated content to the user for confirmation before creating the GitHub issue. This human-in-the-loop approach significantly mitigates the risk of processing unexpected content from external sources.
  • Repository Interaction: The skill executes commands to create issues in the pytorch/pytorch repository. These operations are conducted using standard tools like the GitHub CLI (gh) or official API endpoints. The scope of these actions is appropriately limited to the repository associated with the skill's purpose, and the inclusion of a confirmation step ensures that the user maintains control over external repository modifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 29, 2026, 03:23 AM
Security Audit — agent-trust-hub — release-create-tracker-issue