to-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (such as issue bodies, comments, and external URLs) to generate ticket drafts, creating a potential surface for indirect prompt injection.\n
- Ingestion points: The skill instructions in
SKILL.mddirect the agent to fetch and read the full body and comments of external references provided by the user.\n - Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions when reading external content.\n
- Capability inventory: The skill possesses the ability to write local files to the
.scratch/directory and create new issues on external tracking platforms like GitHub or Linear.\n - Sanitization: The instructions do not define any validation or sanitization steps for the data retrieved from external sources.
Audit Metadata