to-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from untrusted external sources, such as local file paths or issue URLs, which could be used to inject instructions aimed at hijacking the ticket creation logic.
- Ingestion points: The agent is instructed to read the full body and comments of issues from URLs or local specification files (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or isolation rules to prevent the agent from following instructions embedded within the ingested data.
- Capability inventory: The skill has the ability to write files to the local .scratch directory and publish tickets to external trackers like GitHub or Linear (SKILL.md).
- Sanitization: There is no evidence of sanitization or filtering of the external data before it is processed or published to the tracker.
Audit Metadata