execute-ticket
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes 'Ticket Envelope' artifacts and ticket bodies which are untrusted external inputs used to guide implementation and test creation.
- Ingestion points: The
SKILL.mdfile andreferences/skills-only.mddescribe the consumption and validation of ticket envelopes and markdown bodies. - Boundary markers: The instructions utilize 'normalized envelopes' but do not define specific text delimiters or 'ignore' instructions for the ticket body to prevent adversarial subversion.
- Capability inventory: The skill has the authority to implement ticket scope (file editing), execute tests, and perform limited Git operations (merge/sync when authorized).
- Sanitization: The skill relies on external validators like
to-specandticket_contract.pyfor normalization, but does not specify internal sanitization of the input content. - [COMMAND_EXECUTION]: The skill instructions involve calling functions from external packages and executing utility tools to manage the ticket lifecycle.
- Evidence:
references/skills-only.mddirects the agent to call functions fromticket-autopilot/scripts/autopilot/ticket_contract.pyand utilize tools such asto-spec,to-tickets,explain-pr, andsync-local-pifor artifact processing and environment synchronization.
Audit Metadata