to-issues
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [NO_CODE]: The skill is composed entirely of natural language instructions and configuration metadata; it does not contain any executable scripts, binaries, or shell commands.
- [PROMPT_INJECTION]: The skill outlines a process for fetching and processing Product Requirement Documents (PRDs) from external issue trackers. This establishes an indirect prompt injection surface where malicious instructions embedded in a PRD could attempt to manipulate the agent's decomposition and task-creation logic.
- Ingestion points: External PRD content retrieved from issue tracking platforms.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat external PRD data as untrusted or separate from its core operating logic.
- Capability inventory: The skill requires the agent to read from and write to issue trackers to fulfill its purpose.
- Sanitization: There is no mention of content validation, filtering, or instruction-stripping for the PRD data before it is processed.
Audit Metadata