gh-create-issue — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gh-create-issue (Agent Skill) and scored it 45/100 (orange). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 1 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A base64 string of 128+ characters appears in a documentation file. Encoded prompt injection hides the hostile instruction in base64 — invisible to keyword filters — and relies on the agent's ability to decode it at runtime. There is no normal authoring reason to embed a multi-hundred-byte base64 blob in skill docs.
*.sig, SIGNATURES) outside the documentation.Every scanned point with the score it earned and what moved between them.
Aggregate score unchanged between these scans.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user requests to create an issue. Must follow the repository's issue template format.
Analyze the user's request to determine the issue type:
If unclear, ask the user which template to use. Do not default to "Others" on your own.
.github/ISSUE_TEMPLATE/ directory.validations.required: true), title prefix (title), and labels (labels, if present).Based on the selected template, ask the user for required information only. Follow the template's required fields and option constraints (for example, Platform and Priority choices).
Create a temp file and write the issue content:
issue_body_file="$(mktemp /tmp/gh-issue-body-XXXXXX).md"Preview the temp file content. Show the file path (e.g., /tmp/gh-issue-body-XXXXXX.md) and ask for confirmation before creating. Skip this step if the user explicitly indicates no preview/confirmation is needed (for example, automation workflows).
Use gh issue create command to create the issue.
Use a unique temp file for the body:
issue_body_file="$(mktemp /tmp/gh-issue-body-XXXXXX).md"
cat > "$issue_body_file" <<'EOF'
...issue body built from selected template...
EOFCreate the issue using values from the selected template:
gh issue create --title "<title_with_template_prefix>" --body-file "$issue_body_file"If the selected template includes labels, append one --label per label:
gh issue create --title "<title_with_template_prefix>" --body-file "$issue_body_file" --label "<label_1_from_template>" --label "<label_2_from_template>"If the selected template has no labels, do not pass --label.
You may use --template as a starting point (use the exact template name from the repository):
gh issue create --template "<template_name>"Use the --web flag to open the creation page in browser when complex formatting is needed:
gh issue create --webClean up the temp file after creation:
rm -f "$issue_body_file".github/ISSUE_TEMPLATE/ to ensure following the correct format.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.