to-issues
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external issue trackers to gather context for breaking down plans into issues.\n
- Ingestion points: Reads the full body and comments of issues from the project's issue tracker (SKILL.md).\n
- Boundary markers: No delimiters or instructions are provided to the agent to treat external content as untrusted or to ignore embedded instructions.\n
- Capability inventory: The agent is authorized to explore the codebase and post new issues to the tracker.\n
- Sanitization: There is no mention of sanitizing, validating, or filtering the ingested issue content before it is processed by the agent.
Audit Metadata