to-spec
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-controlled conversation history and codebase information to generate and publish content to an external issue tracker.
- Ingestion points: The agent ingests the current conversation context and the repository state as described in SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or instructions to disregard potential commands embedded within the conversation history during the synthesis process.
- Capability inventory: The agent is granted the capability to publish content to an external issue tracker based on the synthesized data.
- Sanitization: No sanitization, escaping, or validation of the conversation content is performed before it is interpolated into the final issue template.
Audit Metadata