to-tickets
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes content from untrusted external sources.
- Ingestion points: In Step 1 (Gather context), the agent is instructed to fetch and read the full body and comments of external URLs or issue numbers provided as arguments.
- Boundary markers: The instructions do not define any boundary markers or special delimiters to isolate external data, nor do they instruct the agent to treat the fetched content as untrusted.
- Capability inventory: The skill grants the agent the ability to explore the codebase, write files to the local
.scratch/directory, and interact with external issue trackers. - Sanitization: There are no explicit requirements for the agent to sanitize or validate retrieved content before incorporating it into the generated tickets.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch data from remote URLs and issue trackers provided in the conversation context.
Audit Metadata