deliver-issues
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external sources such as an issue tracker and associated markdown files to drive automated development workflows.
- Ingestion points: The skill reads metadata and requirements from
docs/agents/issue-tracker.md,requirements.md,design.md, andtasks.mdinSKILL.mdSection 1. - Boundary markers: The instructions do not define delimiters or isolation techniques for the data ingested from these files.
- Capability inventory: The skill has the capability to generate and execute code via the
build-in-wavesandtest-firstsub-skills, and perform repository changes usinggit. - Sanitization: There is no evidence of sanitization or validation of the input data before it is processed by downstream execution sub-skills.
- [COMMAND_EXECUTION]: The skill instructions and testing documentation reference the execution of Git and GitHub CLI commands to manage code branches and pull requests.
- Evidence: Explicit mentions of
git branch,git worktree, andghCLI operations are found inSKILL.mdSection 2 andTESTS.mdlog entries.
Audit Metadata