twg-operational-health
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute commands using the
twgCLI tool. It includes fallback logic to locate the executable in standard local directories such as$HOME/.local/bin/twgfor macOS/Linux or the local app data folder for Windows if it is not present in the system PATH. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from several sources, creating a potential surface for indirect prompt injection.
- Ingestion points: The agent is instructed to fetch and process Jira tickets, JSM incident records, meeting transcripts, and Slack conversation threads using tools like
twg jsm incident queryandtwg jira workitem get. - Boundary markers: The skill does not provide specific instructions or delimiters to isolate untrusted data or warn the agent to ignore instructions embedded within the processed content.
- Capability inventory: The skill utilizes the
twgCLI for data retrieval across various Atlassian services and supports administrative mutations, such as updating Assets schema settings (twg assets objectschema settings update). - Sanitization: There are no explicit instructions for sanitizing or escaping the content retrieved from tickets or transcripts before it is incorporated into the agent's context.
Audit Metadata