to-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data which creates a surface for indirect prompt injection.
- Ingestion points: In
SKILL.md, the agent is instructed to fetch and read the full body and comments of external references, such as specification paths or issue URLs provided in the user context. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' markers to separate fetched content from the agent's primary instructions.
- Capability inventory: The skill has the capability to write files to the local file system (creating
.mdfiles in the.scratch/directory) and perform network operations to create issues on trackers like GitHub, GitLab, or Linear. - Sanitization: No explicit sanitization or validation of the content retrieved from external sources is mentioned before it is processed to generate new ticket descriptions.
Audit Metadata