issue-pool
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a local utility,
tools/md2html.py, which is used to convert project plans into HTML format. The script performs standard file reading and writing operations within the repository's scope and does not utilize dangerous functions such aseval()oros.system(). - [EXTERNAL_DOWNLOADS]: The skill's documentation recommends the installation of the
markdownandpymdownx-extensionsPython packages from PyPI. These are well-known, legitimate libraries commonly used for document processing. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and interpret data from a repository's
ISSUES.mdfile. While this represents a surface for indirect prompt injection, the risk is classified as low because the skill operates within a restricted project-management context and does not provide an execution path for high-privilege system commands or external data exfiltration.
Audit Metadata