dependency-graph
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted external data (work items, issues, tickets) which could contain malicious instructions.
- Ingestion points: Work item text and descriptions in SKILL.md.
- Boundary markers: Absent; the agent is not instructed to disregard embedded commands in the external task data.
- Capability inventory: The skill defines pure logic and does not invoke external tools, scripts, or network operations.
- Sanitization: Absent; no validation or escaping is applied to the work item input.
- [NO_CODE]: This skill consists solely of markdown instructions and does not include any executable scripts, binary files, or configuration-based code execution.
Audit Metadata