to-issues
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions designed to influence the agent's output or actions.
- Ingestion points: The skill fetches data from issue tracker bodies and comments, as well as the local codebase (SKILL.md, Steps 1 and 2).
- Boundary markers: No specific delimiters or boundary instructions are used to isolate untrusted input from the agent's system instructions.
- Capability inventory: The agent has the ability to read the local filesystem and write to the issue tracker (SKILL.md, Step 5).
- Sanitization: No sanitization or filtering is performed on the content retrieved from external sources before processing.
Audit Metadata