to-tickets
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The skill fetches and reads the full body and comments of user-provided URLs, issue numbers, or specification paths (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to ignore or treat embedded commands within the fetched content as data rather than instructions.
- Capability inventory: The skill has the capability to write files to the local
.scratch/directory and publish issues to external trackers like GitHub or Linear (SKILL.md). - Sanitization: The instructions do not specify any validation or filtering for the content retrieved from external URLs or the codebase before it is processed or republished.
Audit Metadata