A repository configures an agent workflow to run when maintainers label an issue as agent-ready. Evaluate the following statements. 1. The job can run when an issue is labeled agent-ready. 2. Repository secrets are available to the script without explicit references. 3. The workflow can create a branch and draft PR, but not edit issue labels.

name: invoke-agent-from-issue

on:
  issues:
    types:
      - labeled

permissions:
  contents: write
  issues: read
  pull-requests: write

jobs:
  invoke-agent:
    if: contains(github.event.issue.labels.*.name, 'agent-ready')
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

         - name: Invoke agent
           env:
             GH_TOKEN: ${{ github.token }}
             ISSUE_URL: ${{ github.event.issue.html_url }}
           run: |
             ./scripts/repo-agent \
                --issue-url "$ISSUE_URL" \
                --create-branch \
                --draft-pr