implement
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources, creating a surface for indirect prompt injection.
- Ingestion points: The skill instructions in
SKILL.mddirect the agent to fetch ticket content from an external issue tracker. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat ticket content as data rather than instructions.
- Capability inventory: The skill is capable of invoking other tools (like "tdd" and "code-review"), running shell commands (tests and type checks), and committing code to a repository.
- Sanitization: No sanitization or validation logic is specified for the data retrieved from the issue tracker before the agent implements the requested changes.
Audit Metadata