to-issues
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes data from issue tracker comments and codebase contents which could contain malicious instructions.
- Ingestion points: fetched issue body and comments, codebase exploration (SKILL.md).
- Boundary markers: absent; the instructions do not provide specific delimiters or warnings to ignore instructions within the ingested content.
- Capability inventory: creation and publishing of issues on the project issue tracker (SKILL.md).
- Sanitization: absent; the process relies on the user's review of the proposed breakdown in Step 4 to detect anomalies.
Audit Metadata