to-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown instructions and YAML configuration. There are no scripts (Python, JavaScript, shell) or binaries included in the package.
- [COMMAND_EXECUTION]: The instructions describe a process for the agent to follow, including gathering context and publishing tickets. While the agent may use tools (like file system access or API calls to issue trackers) to perform these tasks, the skill itself does not invoke arbitrary shell commands or system-level operations.
- [EXTERNAL_DOWNLOADS]: The documentation mentions fetching context from external URLs (specs or issue trackers) if provided by the user, and refers to a trusted source for its upstream provenance. These are standard operations for a development-focused agent and do not constitute a risk.
- [PROMPT_INJECTION]: The skill uses natural instructional language to guide the agent. It does not contain any patterns typical of prompt injection or attempts to bypass safety filters.
Audit Metadata