to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a standard vulnerability surface as it processes external, potentially untrusted data to generate its output.
- Ingestion points: The skill reads and synthesizes information from the current conversation and codebase repository files (SKILL.md).
- Boundary markers: There are no explicit instructions for the agent to use delimiters or to ignore malicious instructions that might be embedded in the analyzed codebase files.
- Capability inventory: The skill includes an instruction to publish the resulting synthesis to a project issue tracker (SKILL.md).
- Sanitization: The skill does not define specific sanitization or validation routines for the content before it is published to the external tracker.
Audit Metadata