simple-issue-description
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface because it is designed to ingest and process untrusted external data.
- Ingestion points: The
Workflowsection inSKILL.mdexplicitly directs the agent to read external notes, conversations, issues, and pull request descriptions. - Boundary markers: The instructions do not establish clear boundary markers (such as delimiters) or specific guidelines for the agent to ignore instructions embedded within the source material.
- Capability inventory: The skill's functionality is strictly limited to text generation and Markdown formatting; it lacks access to any tools for file system interaction, network communication, or shell command execution.
- Sanitization: There are no instructions for sanitizing, escaping, or validating the input data before the agent processes it.
Audit Metadata