rhdh-forge
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/fetch_issue_context.pyand the documentation in the reference files utilize theghandglabCLI tools. The Python implementation usessubprocess.runwith a list of arguments and no shell invocation, which is the recommended secure method for executing external processes. - [SAFE]: The skill is explicitly designed to be read-only. It processes external data (issue descriptions and comments) into a structured JSON format and constructs write commands as payloads for user approval rather than executing them directly, mitigating risks associated with unintended modifications or indirect prompt injection.
Audit Metadata