release-create-tracker-issue
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Content Processing: The skill uses
WebFetchto retrieve milestone dates from release announcements ondev-discuss.pytorch.org. While processing external data always requires caution to avoid indirect prompt injection, this skill follows security best practices by requiring the agent to show the generated content to the user for confirmation before creating the GitHub issue. This human-in-the-loop approach significantly mitigates the risk of processing unexpected content from external sources. - Repository Interaction: The skill executes commands to create issues in the
pytorch/pytorchrepository. These operations are conducted using standard tools like the GitHub CLI (gh) or official API endpoints. The scope of these actions is appropriately limited to the repository associated with the skill's purpose, and the inclusion of a confirmation step ensures that the user maintains control over external repository modifications.
Audit Metadata