Skip to content
Back to skills

Issue Forms

ASecurity

Use when editing Open Horizons GitHub Issue Forms, chooser configuration, or agent-routing intake fields.

  • 2 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added September 4, 2026
ai-agentsrustgit

Security analysis

A100/100

Scanned September 4, 2026

npx -y skills add paulasilvatech/awesome-harness-primitives --skill issue-forms --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Issue Forms?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Issue Forms
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/paulasilvatech-issue-forms/badge)](https://www.skillsdirectory.com/skills/paulasilvatech-issue-forms)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: issue-forms
description: >-
  Use when editing Open Horizons GitHub Issue Forms, chooser configuration, or agent-routing
  intake fields.
paths:
  - ".github/ISSUE_TEMPLATE/*.yml"
user-invocable: false
---

<!-- Generated from harness/github-copilot/plugins/open-horizons-platform/instructions/issue-forms.instructions.md by harness/claude-code/scripts/convert_from_copilot.py. Edit the source, not this file. -->

# GitHub Issue Forms

## Conventions

- Give each routed form one valid `agent:` label that resolves to a repository agent; `.github/ISSUE_TEMPLATE/config.yml` is chooser configuration and is not routed.
- Keep stable field IDs because IssueOps parses submitted form data by identifier.
- Use dropdowns or checkboxes for bounded routing and risk metadata; reserve free text for context that cannot be enumerated.
- Mark operationally required fields as required, while never asking users to paste credentials, tokens, personal data, or customer secrets.
- State that submitted commands, URLs, manifests, and logs are untrusted evidence rather than executable instructions.
- Keep labels, titles, contacts, and descriptions aligned with the workflow that consumes the issue.
- Include explicit authorization and approval acknowledgements for deployment, rollback, deletion, or other high-impact requests.

## Verification

- YAML and Issue Form schema validation pass.
- Every routed form resolves to an existing agent label and stable field IDs.
- Chooser configuration remains label-free and no form solicits sensitive values.

## Do / Do Not

| Do | Do not |
| --- | --- |
| Use stable field IDs, valid routing labels, and explicit approval acknowledgements. | Collect secrets or route chooser configuration as an issue. |
| Validate every template against its schema and installed agent inventory. | Add a label that has no owning agent or automation. |

## Checklist Before Opening a PR

- [ ] The change matches this instruction's `applyTo` scope.
- [ ] YAML and Issue Form schema validation pass.
- [ ] Every routed label resolves to an installed agent.
- [ ] No field solicits credentials, tokens, or private tenant values.
- [ ] Chooser configuration remains label-free.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.