to-tickets
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to Indirect Prompt Injection as it is instructed to fetch and process external data that may contain malicious instructions designed to hijack the agent's behavior.
- Ingestion points: The skill fetches the full body and comments of external issues or specifications when a URL or reference is provided (SKILL.md, Step 1).
- Boundary markers: Absent; there are no instructions to wrap the fetched external content in delimiters or provide warnings to ignore embedded instructions.
- Capability inventory: The skill has the capability to write files locally to the
.scratch/directory and publish issues to external platforms like GitHub or Linear (SKILL.md, Step 5). - Sanitization: Absent; the instructions do not specify any validation, filtering, or escaping of the ingested external content before it is used to generate new tickets.
Audit Metadata