to-tickets
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection because it is designed to ingest and process data from external, potentially untrusted sources.
- Ingestion points: In Step 1 (Gather context), the skill fetches and reads the full body and comments from external issue numbers or URLs provided as arguments.
- Boundary markers: The instructions lack explicit boundary markers or delimiters (like XML tags or specific 'ignore instructions') to distinguish between the fetched external content and the skill's own operational logic.
- Capability inventory: The skill has the capability to write local files (
tickets.md) and perform network writes via issue tracker APIs (GitHub, Linear) to publish new issues (Step 5). - Sanitization: There is no mention of sanitization, filtering, or validation processes for the data retrieved from external sources before it is used to generate new tickets or modify the local repository.
Audit Metadata