aikido-issues

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and display external data from the Aikido security feed, including fields such as issue_title and issue_remediation, which could theoretically contain instructions intended to influence the agent.
  • Ingestion points: Data enters the agent's context through the output of the aikido_issues_list tool call in SKILL.md.
  • Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands within the issue data.
  • Capability inventory: The skill is primarily intended for information retrieval and summarization; it does not include scripts or tools with high-privilege capabilities like arbitrary shell execution or file system writes.
  • Sanitization: No explicit sanitization or filtering logic is provided to handle untrusted content from the security feed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 04:56 AM