github-issue-response

65 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a security skill usually runs scanners and checks websites.

By amd/gaia (GitHub) · security · 1,618 stars · scanned at commit 2abaa51

Respond to a GitHub issue, PR comment, discussion reply, or review on amd/gaia. Use when writing any reply that will be posted to GitHub — triaging a bug report, answering a usage question, responding to a feature request, replying to a contributor on a PR, or handling a reported security issue. Covers the security-escalation protocol (never discuss exploit details publicly), when to escalate to @kovtcharov-amd, per-response-type length caps, and the doc-link map for pointing users at the right…

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

The author does not mention this. Expected for a security skill.

Found in 1 place.

.claude/skills/github-issue-response/SKILL.md, line 144> The issue is on line 45 where you use `subprocess.call()` with user input. Here's how an

Downloads and installs other software

The author does not mention this.

Found in 36 places.

CLAUDE.md, line 430several worktrees that install points at whichever one ran `pip install -e` last.
CLAUDE.md, line 522uv venv && uv pip install -e ".[dev]"
CLAUDE.md, line 523uv pip install -e ".[ui]" # For Agent UI development

Show 17 more

docs/quickstart.mdx, line 46npm install -g @amd-gaia/agent-ui
docs/quickstart.mdx, line 60- **macOS:** `brew install node@22`
docs/quickstart.mdx, line 61- **Linux:** `curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - && sudo apt install -y nodejs`
docs/quickstart.mdx, line 69npm install -g @amd-gaia/agent-ui@latest
docs/quickstart.mdx, line 77npm install -g @amd-gaia/agent-ui@<version>
docs/quickstart.mdx, line 130curl -fsSL https://amd-gaia.ai/install.sh | sh
docs/quickstart.mdx, line 200uv pip install amd-gaia
docs/quickstart.mdx, line 204**Optional extras:** `uv pip install "amd-gaia[talk,rag]"` for voice and document Q&A features.
docs/quickstart.mdx, line 259uv pip install amd-gaia
docs/quickstart.mdx, line 265uv pip install "amd-gaia[talk,rag]"
docs/quickstart.mdx, line 336uv pip install -e ".[dev]"
docs/quickstart.mdx, line 342uv pip install -e ".[dev,rag,ui]"
docs/quickstart.mdx, line 375**Requires:** Git must be installed (`sudo apt install git`).
docs/quickstart.mdx, line 407uv pip install -e ".[dev]"
docs/quickstart.mdx, line 413uv pip install -e ".[dev,rag,ui]"
docs/reference/cli.mdx, line 420**not** install the terminal UI (`gaia-tui`) — get that with `npx @amd-gaia/gaia`, which
docs/reference/cli.mdx, line 912pip install gaia-agent-email # one agent

and 16 more places

Sends data to these websites: deb.nodesource.com, amd-gaia.ai, astral.sh, raw.githubusercontent.com

The author does not mention this. Expected for a security skill.

Found in 7 places.

docs/quickstart.mdx, line 61- **Linux:** `curl -fsSL https://deb.nodesource.com/setup_20.x | sudo -E bash - && sudo apt install -y nodejs`
docs/quickstart.mdx, line 130curl -fsSL https://amd-gaia.ai/install.sh | sh
docs/reference/cli.mdx, line 1371curl http://localhost:8080/health

Show 4 more

docs/reference/cli.mdx, line 1610curl -H "Authorization: Bearer $GAIA_MCP_AUTH_TOKEN" http://localhost:8765/status
docs/reference/dev.mdx, line 67curl -LsSf https://astral.sh/uv/install.sh | sh
docs/setup.mdx, line 105curl -LsSf https://astral.sh/uv/install.sh | sh
docs/setup.mdx, line 125curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash

Changes files outside its own folder

The author does not mention this.

Found in 5 places.

docs/quickstart.mdx, line 84rm -rf ~/.gaia
docs/quickstart.mdx, line 136- ✅ Add `~/.gaia/bin` to your PATH. Only GAIA's own commands live there, so your system `python3` and `pip` stay first. Re-running the installer fixes an older
docs/reference/cli.mdx, line 2812| `install <name[@range]>` | Install a published skill into `~/.gaia/skills/` |

Show 2 more

docs/reference/cli.mdx, line 3821Agents install into `~/.gaia/agents/<id>/`. Every artifact is checked against its
docs/reference/cli.mdx, line 4245- Log files, omitted with `--no-logs`: `~/.gaia/gaia.log`, the Electron logs (`electron-install.log`, `electron-main.log`, `electron-updater.log`), `~/.gaia/log

Safer alternatives

Low-risk skills in the same category (security) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'github-issue-response' ] || [ -L ~/.agents/skills/'github-issue-response' ]; then echo 'A skill folder named github-issue-response already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/amd/gaia' "$d" && git -C "$d" checkout --quiet '2abaa51798ab45cb9d8add383c9e1b1f0737bd1c' -- '.claude/skills/github-issue-response' && mkdir -p ~/.agents/skills && cp -R "$d"/'.claude/skills/github-issue-response' ~/.agents/skills/'github-issue-response' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'github-issue-response' ~/.claude/skills/'github-issue-response' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for amd/gaia shows the score of its lowest-scoring skill.

SkillTrust badge for amd/gaia

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/amd/gaia.svg)](https://zalavijaysinh.github.io/skilltrust/repos/amd/gaia/)

Score history

Date	Version	Score
2026-11-09	`2abaa51`	65
2026-11-07	`c11ea99`	65