plan-to-github-issue

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local git and gh (GitHub CLI) commands to manage branch state and interact with repository issues.
  • Uses git config to store and retrieve state information about deferred planning issues.
  • Uses gh api and gh issue to create, query, and comment on GitHub issues.
  • Uses gh pr to manage pull request descriptions.
  • [SAFE]: The skill includes explicit security controls to prevent unintended data modification or exfiltration:
  • Validates that target issue numbers are indeed issues and not pull requests before commenting to avoid cluttering review threads.
  • Implements a "sanity gate" for PR body modifications, ensuring new content is never shorter than the original to prevent accidental data loss.
  • Uses --body-file arguments with the GitHub CLI rather than passing content as shell variables, mitigating risks from control characters or shell injection in the planning text.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 12:44 AM
Security Audit — agent-trust-hub — plan-to-github-issue