issue-decomposition
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the GitHub CLI (
gh) to create, edit, and manage issues and projects. These commands are restricted to the user's own repository and project context and are essential for the skill's purpose of issue management. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from a 'Parent Issue' which could theoretically contain malicious instructions. However, the skill provides a clear structure and template for decomposition, including specific acceptance criteria and verification steps, which helps isolate and sanitize the information being processed. The attack surface is low as the tool is designed for internal project management.
Audit Metadata