to-tickets-plus
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection due to its handling of untrusted external content.\n
- Ingestion points: The agent is instructed in
SKILL.mdto fetch and read the full bodies and comments of issues, URLs, or specification paths to gather necessary context.\n - Boundary markers: The instructions do not implement explicit delimiters or instructions to ignore embedded commands within the external content, creating a risk that malicious instructions in source documents could influence agent behavior.\n
- Capability inventory: The skill allows the agent to write to the local filesystem (within the
.scratch/directory) and publish data to external trackers via the GitHub CLI (gh) and Linear API tools.\n - Sanitization: The skill lacks explicit sanitization or validation mechanisms for the ingested content before it is used to draft or publish tickets.
Audit Metadata