jetbrains-youtrack
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions for interacting with the JetBrains YouTrack API via Apideck's Proxy service, which is a legitimate architectural pattern for managing authentication.
- [SAFE]: The usage examples correctly utilize environment variables (e.g.,
${APIDECK_API_KEY},${CONSUMER_ID}) to handle sensitive information, avoiding hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it is designed to ingest data from an external API.
- Ingestion points: External content is retrieved via the Apideck Proxy endpoint
https://unify.apideck.com/proxy(SKILL.md). - Boundary markers: None are defined in the instructions to delimit or sanitize the fetched content.
- Capability inventory: The skill facilitates network operations through
curlto fetch and potentially process data. - Sanitization: There are no explicit sanitization or validation steps described for the data received from the external service.
Audit Metadata