to-issues
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted content from an external issue tracker, which introduces a potential surface for indirect prompt injection.
- Ingestion points: The agent is instructed in Step 1 to fetch and read the full body and comments of issues from the issue tracker.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard potential instructions embedded within the fetched issue data.
- Capability inventory: The skill allows the agent to explore the local codebase and publish new issues back to the tracker.
- Sanitization: No sanitization or content validation is performed on the data retrieved from the issue tracker before it is used to draft new vertical slices.
Audit Metadata