skills/billpeet/yt-cli/youtrack/Gen Agent Trust Hub

youtrack

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill depends on the @billpeet/yt-cli package, which must be installed via npm. This is a vendor-owned resource provided by the skill author.
  • [COMMAND_EXECUTION]: The skill operates by executing shell commands through the yt CLI to perform searches, updates, and other management tasks on YouTrack.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from YouTrack issues, including summaries, descriptions, and comments, which could contain untrusted instructions.
  • Ingestion points: The skill retrieves data from the YouTrack API via yt issue search, yt issue get, and yt issue comments (SKILL.md).
  • Boundary markers: There are no explicit instructions for the agent to use delimiters or to disregard instructions found within the YouTrack issue content.
  • Capability inventory: The skill possesses the capability to execute shell commands (yt) to modify YouTrack resources (SKILL.md).
  • Sanitization: No sanitization or validation logic is specified for the data retrieved from the remote YouTrack instance.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 05:05 AM
Security Audit — agent-trust-hub — youtrack