issue-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill reads issue descriptions and comments from a public GitHub repository using
gh issue view. Since this content is provided by external users, it represents an attack surface where malicious instructions could be embedded to influence the agent's analysis. - [COMMAND_EXECUTION]: The skill relies on executing
gh(GitHub CLI) commands to interact with the repository. While these commands are focused on data retrieval, they constitute shell command execution. The target repositorytoss/es-toolkitis associated with a known vendor.
Audit Metadata