to-issues
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions do not contain any obfuscated code, unauthorized command execution, or malicious network operations.
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill is designed to ingest and process data from external issue trackers, which is an untrusted source.
- Ingestion points: Reads full bodies and comments of issues from an external tracker (SKILL.md, Step 1).
- Boundary markers: None mentioned.
- Capability inventory: Codebase exploration and writing new issues to the tracker.
- Sanitization: No explicit sanitization of fetched issue content is described.
Audit Metadata