to-issues
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from external sources (issue tracker comments and codebase content), which serves as a potential surface for indirect prompt injection attacks where malicious data could influence agent behavior.
- Ingestion points: The agent is instructed to read full bodies and comments from issues via an issue tracker tool and explore the current state of the codebase.
- Boundary markers: No explicit delimiters or boundary markers (like XML tags or triple quotes) are defined to isolate untrusted data from the instructions.
- Capability inventory: The skill possesses the capability to write and publish new issues to a project tracking system.
- Sanitization: There are no instructions for sanitizing or filtering input gathered from the issue tracker before it is used to generate new task descriptions. This finding is considered low risk as it is an inherent characteristic of tools that process project documentation.
Audit Metadata