to-tickets
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection by ingesting and acting upon untrusted data from external sources.
- Ingestion points: The process involves fetching external references such as specification paths, issue numbers, or URLs, and reading their full body and comments to generate tickets.
- Boundary markers: There are no defined delimiters or instructions to the agent to treat the fetched external content as data rather than instructions, nor are there warnings to ignore embedded commands.
- Capability inventory: The skill has the capability to write to the local filesystem (under
.scratch/) and perform network operations to interact with issue tracking platforms like GitHub or Linear. - Sanitization: The instructions do not specify any validation, filtering, or sanitization of the content retrieved from external URLs or issue comments before it is used to draft ticket descriptions.
Audit Metadata