issue-tracker
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it ingests untrusted data from GitHub issues and comments to perform automated reasoning and document generation.
- Ingestion points: Issue metadata, bodies, and comments are fetched via
mcp_github_github_issue_readandmcp_github_github_search_issues(SKILL.md). - Boundary markers: The prompt lacks explicit delimiters or instructions to ignore instructions embedded within the fetched issue content when performing 'Smart Action Item Inference'.
- Capability inventory: The skill can write files to the workspace (HTML and Markdown) and perform write operations on GitHub (creating/updating issues and comments).
- Sanitization: There is no instruction to sanitize or escape untrusted content, specifically when rendering issue bodies into the HTML template (
{issue body as HTML}), which could lead to Cross-Site Scripting (XSS) if a user views the generated report.
Audit Metadata