to-tickets
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests data from external sources, including issue bodies, comments, and project specifications provided by the user.
- Ingestion points: Context gathered from conversation and external references (URLs, issue numbers) as described in the 'Gather context' section of
SKILL.md. - Boundary markers: The instructions do not explicitly require the use of delimiters or 'ignore' markers to isolate the fetched external content from the agent's instructions.
- Capability inventory: The skill is capable of writing files to the local
.scratch/directory and performing network operations to publish tickets to issue trackers. - Sanitization: No specific sanitization or validation logic is defined for the content retrieved from external references before it is processed.
- [DATA_EXPOSURE]: The skill reads local project configuration files (e.g.,
docs/agents/issue-tracker.md) to determine the target tracker, which is a standard and expected behavior for its primary purpose.
Audit Metadata