jetbrains-youtrack

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides instructions for interacting with the JetBrains YouTrack API via Apideck's Proxy service, which is a legitimate architectural pattern for managing authentication.
  • [SAFE]: The usage examples correctly utilize environment variables (e.g., ${APIDECK_API_KEY}, ${CONSUMER_ID}) to handle sensitive information, avoiding hardcoded secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it is designed to ingest data from an external API.
  • Ingestion points: External content is retrieved via the Apideck Proxy endpoint https://unify.apideck.com/proxy (SKILL.md).
  • Boundary markers: None are defined in the instructions to delimit or sanitize the fetched content.
  • Capability inventory: The skill facilitates network operations through curl to fetch and potentially process data.
  • Sanitization: There are no explicit sanitization or validation steps described for the data received from the external service.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 06:32 PM