gitlab-epic-creator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill package contains only a markdown manifest and instructions; there are no scripts, binaries, or other executable files included.
- [INDIRECT_PROMPT_INJECTION]: The skill handles user requests related to GitLab epic creation, which represents a potential input surface for indirect prompt injection.
- Ingestion points: Processes user input triggered by keywords such as "gitlab epic creator", "gitlab creator", and "gitlab" (SKILL.md).
- Boundary markers: The skill instructions do not specify any delimiters or safety markers to isolate user-provided data from agent instructions.
- Capability inventory: The skill is allowed to use
Bash(cmd:*),Read,Write, andEdittools, which could be exploited if malicious instructions are embedded in the ingested data (SKILL.md). - Sanitization: No instructions are provided for sanitizing, escaping, or validating external content before it is processed by the agent's tools.
Audit Metadata