fusion-issue-task-planning
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external GitHub issues (titles, bodies, and acceptance criteria), which creates a surface for instructions embedded in that data to manipulate the task planning logic.
- Ingestion points:
SKILL.mdStep 2 specifies gathering data from GitHub issue fields including title, body, acceptance criteria, and scenarios. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the ingested issue data.
- Capability inventory: The skill has the ability to write draft files to the local
.tmp/directory and delegate repository mutations (issue creation/linkage) to thefusion-issue-authoringsub-agent. - Sanitization: There are no explicit content filtering or sanitization rules defined for the processed issue data.
- [COMMAND_EXECUTION]: The skill requires and interacts with the GitHub Model Context Protocol (MCP) server to perform repository-related tasks.
- Evidence:
SKILL.mdfrontmatter listsgithubas a required MCP server and referencesmcp_githubtools for workflow execution.
Audit Metadata