ticket-autopilot
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Orchestrates developer workflows by invoking
git,gh(GitHub), andaz(Azure DevOps) CLI tools to manage repository states and PR interactions.\n- [EXTERNAL_DOWNLOADS]: Interacts with GitHub and Azure DevOps APIs to manage private repositories and synchronize project data as part of its core orchestration functionality.\n- [REMOTE_CODE_EXECUTION]: Synchronizes and installs executable agent skills via checkouts and thepitool. This process is bounded by integrated ticket verification and explicit authority grants.\n- [INDIRECT_PROMPT_INJECTION]: Ingests untrusted data through the parsing of ticket Markdown files and PR bodies. - Ingestion points:
scripts/autopilot/ticket_contract.py(ticket files) andscripts/autopilot/finalizer.py(PR bodies). - Boundary markers: Present; utilizes YAML frontmatter delimiters and Markdown heading structures to isolate inputs.
- Capability inventory:
subprocesscalls for Git and provider APIs, and local tool synchronization viapi. - Sanitization: Present; enforces strict regex validation for identifiers, paths, and metadata fields.\n- [SAFE]: Implements a high-integrity design with SHA-256 integrity ledgers, rigorous path validation to prevent escape, and automated secret redaction for diagnostic reporting.
Audit Metadata