ticket-work
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a standard software development lifecycle (SDLC) process for a repository using well-known package management and build tools.
- [INDIRECT_PROMPT_INJECTION]: The workflow requires the agent to read internal documentation (e.g., AGENTS.md) and project-specific coding rules (e.g., .claude/rules/*.md) to inform its implementation steps. This creates a data ingestion surface where instructions within these project files can influence agent behavior. This is the intended primary purpose of the skill to ensure project compliance. Ingestion points: Local project documentation and rule files (Step 2). Boundary markers: None present in the instructions. Capability inventory: Execution of package manager commands (pnpm) and git operations. Sanitization: No explicit sanitization or validation of the ingested markdown content is specified.
Audit Metadata