issue-pool

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for issue tracking and project planning using markdown files (ISSUES.md and docs/plan/*.md). Its operations are confined to standard repository management tasks.
  • [COMMAND_EXECUTION]: The skill includes a local utility script tools/md2html.py. This script performs markdown-to-HTML conversion using standard libraries. It operates exclusively on local files provided as arguments and does not exhibit dangerous execution patterns like eval() or network-based command fetching.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the standard Python markdown library and optionally pymdown-extensions. These are well-known, industry-standard packages for markdown processing.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as repository code, existing documentation, and user-provided issue descriptions. As a planning assistant, this ingestion is necessary for its function. The skill includes boundary logic (e.g., "pending" if requirements are unclear) to manage ambiguous or potentially conflicting inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 04:01 PM