implement
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch ticket references from an external issue tracker. This content is then used to guide the implementation work, creating a surface where malicious instructions inside a ticket could hijack the agent's behavior.
- Ingestion points: External issue tracker (SKILL.md).
- Boundary markers: There are no specific delimiters or warnings mentioned to help the agent distinguish between ticket data and the skill's core instructions.
- Capability inventory: The skill has the ability to execute shell commands for testing and typechecking, and can perform file system operations via git commits.
- Sanitization: No explicit validation or sanitization of the fetched ticket content is defined.
- [COMMAND_EXECUTION]: The skill requires the agent to run typechecking tools and test suites, which involves executing scripts and binaries within the repository. It also performs git operations to commit changes to the branch.
Audit Metadata