to-tickets
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external sources (issue bodies, comments, and project specifications) and incorporates it into the agent's context to generate tickets. This creates a surface where malicious instructions embedded in the source material could influence the agent's behavior.
- Ingestion points: External URLs, issue numbers, and codebase specifications defined in
SKILL.md(Step 1: Gather context). - Boundary markers: Absent; the skill does not use specific delimiters or instructions to prevent the agent from obeying commands found within the fetched content.
- Capability inventory: The skill can write local files to the
.scratch/directory and make network requests to publish issues to external platforms like GitHub or Linear. - Sanitization: Absent; there are no instructions to validate or escape the content retrieved from external sources before it is processed by the model.
Audit Metadata