github-bug-report-triage
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted GitHub issue content that could contain instructions intended to manipulate the agent's behavior.
- Ingestion points: The agent ingests bug report descriptions and reproduction steps from external users (SKILL.md).
- Boundary markers: The skill lacks explicit instructions or delimiters to isolate untrusted data from the agent's operational logic.
- Capability inventory: The skill's capabilities are limited to analyzing text and providing feedback; it does not have the ability to execute commands, write to the file system, or make network requests.
- Sanitization: The skill does not implement any validation or sanitization of the external content before processing it.
Audit Metadata