to-tickets
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes data from external URLs and issue trackers, which introduces a surface for indirect prompt injection where malicious content in those sources could influence agent behavior.
- Ingestion points: Full body and comments from external URLs or issue references (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions within the ingested content.
- Capability inventory: The skill is capable of writing local files in the .scratch/ directory and publishing issues to external services like GitHub and Linear (SKILL.md).
- Sanitization: No sanitization or validation of the fetched external content is described.
- [EXTERNAL_DOWNLOADS]: The skill gathers context by fetching content from user-provided URLs and remote issue tracking platforms.
Audit Metadata