to-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted external data from existing issues or external specifications to create new tickets.
- Ingestion points: In
SKILL.mdunder 'Gather context', the skill is instructed to fetch and read the full body and comments of issues or reference URLs. - Boundary markers: None identified. The instructions do not specify the use of delimiters or warnings to ignore embedded instructions within the fetched data.
- Capability inventory: The skill has the capability to write markdown files to the local
docs/directory and execute commands via theghCLI and Atlassian MCP to create issues on external trackers. - Sanitization: No evidence of sanitization, escaping, or validation of the external content before it is processed and written to new tickets or files was found.
- [COMMAND_EXECUTION]: The skill uses the GitHub Command Line Interface (
gh) to perform actions such as creating issues in the repository's GitHub Issues tracker when specified by the user.
Audit Metadata