to-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain hidden instructions intended to manipulate the agent's behavior during ticket generation.
- Ingestion points: The skill fetches and reads the full body and comments of issues or specification paths provided by the user (Step 1: Gather context).
- Boundary markers: The instructions do not define clear boundaries or provide guidance to the agent to ignore instructions embedded within the fetched external data.
- Capability inventory: The skill writes files to the local
.scratch/directory and interacts with external issue trackers like GitHub or Linear to publish tickets. - Sanitization: There is no mention of sanitizing or filtering the external content before it is processed and interpolated into the generated tickets.
Audit Metadata