implement
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external issue tracker, which serves as a potential vector for malicious instructions to influence the agent's code implementation and execution.
- Ingestion points: SKILL.md (instructions to fetch ticket references from the issue tracker).
- Boundary markers: None present in the instructions to separate external data from agent logic.
- Capability inventory: SKILL.md (includes capabilities to run typechecking, execute test suites, and commit code changes to the current branch).
- Sanitization: No sanitization or validation of the fetched ticket content is specified before it is used to guide implementation and testing steps.
Audit Metadata