to-tickets-plus

Pass

Audited by Gen Agent Trust Hub on Jul 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection due to its handling of untrusted external content.\n
  • Ingestion points: The agent is instructed in SKILL.md to fetch and read the full bodies and comments of issues, URLs, or specification paths to gather necessary context.\n
  • Boundary markers: The instructions do not implement explicit delimiters or instructions to ignore embedded commands within the external content, creating a risk that malicious instructions in source documents could influence agent behavior.\n
  • Capability inventory: The skill allows the agent to write to the local filesystem (within the .scratch/ directory) and publish data to external trackers via the GitHub CLI (gh) and Linear API tools.\n
  • Sanitization: The skill lacks explicit sanitization or validation mechanisms for the ingested content before it is used to draft or publish tickets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 18, 2026, 07:39 PM
Security Audit — agent-trust-hub — to-tickets-plus