generate-status-report
Warn
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: MEDIUMPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Metadata Inconsistency: The
SKILL.jsonfile identifies the author as 'Anthropic Marketplace 3p', which contradicts the provided author context '420company'. This misleading branding could lead users to trust the skill more than appropriate. - [PROMPT_INJECTION]: Indirect Prompt Injection: The skill processes untrusted data from Jira issue summaries and descriptions (Ingestion points:
SKILL.md, Step 2/3). It lacks explicit boundary markers to delimit this untrusted content. The skill has capabilities to create or update Confluence pages and query Jira (Capability inventory:SKILL.md, Step 2/5). Whilescripts/jql_builder.pyprovides sanitization for JQL queries, it does not sanitize the content formatted into the Confluence report. - [SAFE]: The skill uses standard Atlassian tools for their intended project management purposes.
- [SAFE]: The inclusion of
scripts/jql_builder.pyis a security best practice, providing a regex-based allow-list to prevent JQL injection attacks.
Audit Metadata