github-cli

Warn

Audited by Socket on Nov 13, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/gh-helpers.sh

This script provides GitHub CLI workflow helpers and performs authenticated GitHub and Git operations when called. The main security issue is command injection in `ghx_issue_create`: caller-controlled arguments and GH_REPO are assembled into a string executed by `eval`. No evidence of credential theft or unauthorized data exfiltration is present; severity is a security warning when inputs may be untrusted.

Confidence: 99%Severity: 55%
Audit Metadata
Analyzed At
Nov 13, 2026, 02:08 AM
Package URL
pkg:socket/skills-sh/yonatangross%2Fcreate-yg-app%2Fgithub-cli%2F@e1f1d15bff553b9ec03f8e7c2eef421815dc9900