zentao-feedback
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it facilitates the retrieval and processing of untrusted feedback data from an external system.
- Ingestion points: Untrusted data enters the agent's context through the output of commands documented in
references/zentao-feedback-list.mdandreferences/zentao-feedback-get.md, which return fields such astitleanddescpopulated by third-party users. - Boundary markers: There are no explicit instructions or delimiters defined in the skill to warn the agent to ignore or isolate potentially malicious instructions contained within feedback descriptions.
- Capability inventory: The skill provides the agent with the ability to perform high-impact actions including deleting feedback (
zentao-cli feedback delete), modifying feedback (zentao-cli feedback update), and reassigning feedback (zentao-cli feedback assign). - Sanitization: The documentation does not specify any sanitization, filtering, or validation steps for the content retrieved from the ZenTao API before the agent processes it.
Audit Metadata