to-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from documentation files which may contain untrusted content.\n
- Ingestion points: Input files include
docs/product.md,docs/tech-spec.md, anddocs/design.mdas defined inSKILL.md.\n - Boundary markers: There are no explicit delimiters or safety instructions provided to help the agent distinguish between documentation text and potential instructions embedded within that text.\n
- Capability inventory: The skill has the ability to write new files to the
docs/tickets/directory.\n - Sanitization: The skill lacks sanitization or validation mechanisms for the content read from the documentation files.\n- [EXTERNAL_DOWNLOADS]: The skill contains references to external documentation on GitHub.\n
- Evidence: References to
github.com/mattpocock/skillsandgithub.com/addyosmani/agent-skillsare included in the sources section ofSKILL.md.
Audit Metadata