github-cli
Warn
Audited by Socket on Nov 13, 2026
1 alert found:
AnomalyAnomalyscripts/gh-helpers.sh
LOWAnomalyLOW
scripts/gh-helpers.sh
This script provides GitHub CLI workflow helpers and performs authenticated GitHub and Git operations when called. The main security issue is command injection in `ghx_issue_create`: caller-controlled arguments and GH_REPO are assembled into a string executed by `eval`. No evidence of credential theft or unauthorized data exfiltration is present; severity is a security warning when inputs may be untrusted.
Confidence: 99%Severity: 55%
Audit Metadata