ticket-creator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests potentially untrusted data from the local codebase to inform ticket generation, creating a surface for indirect prompt injection.
- Ingestion points: The skill researches project files including
README.md,CLAUDE.md,AGENTS.md, source files, and existing tickets in directories like.tickets/ordocs/tickets/(identified inSKILL.md, Step 2). - Boundary markers: The skill does not implement specific delimiters or instructions to ignore embedded commands within the ingested codebase files before they are processed by sub-agents.
- Capability inventory: The skill utilizes file-system exploration (Glob, Grep) and spawns parallel sub-agents to summarize findings.
- Sanitization: The instructions do not specify sanitization or validation of the content read from files before it is interpolated into agent prompts.
- [EXTERNAL_DOWNLOADS]: The skill provides installation instructions that reference an external source for skill management.
- Evidence: The
README.mdfile suggests installation vianpx skills addfrom the author's GitHub repository (https://github.com/belsrc/skills).
Audit Metadata