gh-create-issue
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
gh(GitHub CLI) tool to perform issue creation, which involves running shell commands with parameters potentially influenced by repository content. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface.
- Ingestion points: The skill instructions in
SKILL.mdrequire the agent to explore the 'current codebase'. - Boundary markers: The skill lacks explicit delimiters or instructions to ignore potential commands embedded in the files it reads.
- Capability inventory: The skill has the ability to execute shell commands (
gh issue create) as specified inSKILL.md. - Sanitization: No sanitization logic is defined to prevent untrusted codebase content from affecting agent behavior or command arguments.
Audit Metadata