worker
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection by ingesting and acting upon untrusted data from external task providers.
- Ingestion points: Tickets are fetched from ClickUp tasks, GitHub issues, Linear issues, and Jira issues as described in the SKILL.md file.
- Boundary markers: The provided documentation does not define boundary markers (e.g., XML tags or specific delimiters) or instructions to ignore instructions embedded within the ticket content.
- Capability inventory: The skill possesses significant capabilities, including running Claude Code in git worktrees, executing test suites, and creating Pull Requests.
- Sanitization: There is no evidence of sanitization or safety validation for the ticket descriptions before they are used to generate implementation plans and execute code.
Audit Metadata