to-tickets

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from documentation files which may contain untrusted content.\n
  • Ingestion points: Input files include docs/product.md, docs/tech-spec.md, and docs/design.md as defined in SKILL.md.\n
  • Boundary markers: There are no explicit delimiters or safety instructions provided to help the agent distinguish between documentation text and potential instructions embedded within that text.\n
  • Capability inventory: The skill has the ability to write new files to the docs/tickets/ directory.\n
  • Sanitization: The skill lacks sanitization or validation mechanisms for the content read from the documentation files.\n- [EXTERNAL_DOWNLOADS]: The skill contains references to external documentation on GitHub.\n
  • Evidence: References to github.com/mattpocock/skills and github.com/addyosmani/agent-skills are included in the sources section of SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 03:39 AM