to-prd
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it synthesizes output based on the content of the current conversation and the repository files.
- Ingestion points: The skill ingest untrusted data from the "current conversation context" and "codebase understanding" achieved by exploring the repository.
- Boundary markers: The skill lacks explicit delimiters or instructions to ignore potential commands embedded within the source code or conversation history being processed.
- Capability inventory: The skill has the capability to read the local filesystem ("explore the repository") and perform network writes ("post it to the project issue tracker").
- Sanitization: There are no instructions provided to sanitize or validate the data ingested from the project files or chat context before it is published to the issue tracker.
Audit Metadata