create-issue
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository environment to inform issue creation, creating a surface for indirect prompt injection.
- Ingestion points: The skill analyzes files in
.github/ISSUE_TEMPLATE/, scans project documentation, and reviews commit messages to determine language style and content. - Boundary markers: The instructions lack explicit boundary markers or guidelines for the agent to distinguish between its core instructions and potentially malicious content embedded within the files it reads.
- Capability inventory: The skill has the capability to execute repository commands via
Bash(gh repo view)and write data to the GitHub API viamcp__github__issue_write. - Sanitization: There is no indication of input validation or sanitization for the external content retrieved from the repository before it is interpolated into the prompt or used to create the issue.
Audit Metadata