to-issues
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple sources which could contain malicious instructions designed to influence the agent's output.
- Ingestion points: The skill reads external plans, specs, PRDs, and fetches full bodies and comments from an issue tracker.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore or isolate embedded instructions within the processed data.
- Capability inventory: The skill has the capability to explore the local codebase and perform network operations to publish new issues to a project's issue tracker.
- Sanitization: There is no evidence of input validation or sanitization of the content retrieved from the issue tracker or external documents before it is used to draft and publish new issues.
Audit Metadata