filing-breakdown-tasks
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The evaluation script
evals/run_real_eval.pyusessubprocess.Popento execute theclaudeCLI for trigger-rate testing. This is a developer-facing utility for regression testing. The script builds the command as a list to prevent shell injection and implements environment variable sanitization before execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from
tasks.mdandbreakdown.mdto generate ticket fields, which represents an ingestion surface for potentially untrusted data if the source files are externally controlled. - Ingestion points: Local
tasks.mdandbreakdown.mdfiles read via theReadandGlobtools. - Boundary markers: Absent; instructions do not specify the use of delimiters or 'ignore' warnings for the ingested content.
- Capability inventory: The skill can read local files, perform file searches, and hand off data to the
bitwarden-atlassian-tools:filing-jira-ticketsskill. - Sanitization: No explicit sanitization or validation of the task descriptions or acceptance criteria is described in the prompt logic.
Audit Metadata