release-notes-generator
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and summarize external ticket content from sources like GitHub, Jira, and Linear. This creates a surface for indirect prompt injection if the external data contains instructions intended to manipulate the summary output.
- Ingestion points: External ticket data from platforms defined in the
{{TICKET_SOURCES}}placeholder (SKILL.md). - Boundary markers: The prompt template lacks specific delimiters or instructions to ignore potential commands embedded within the retrieved ticket text.
- Capability inventory: The skill has the capability to write the summarized content to Google Drive (SKILL.md).
- Sanitization: There is no explicit sanitization or filtering mechanism for the external content before it is processed by the agent.
Audit Metadata