implement
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions promote secure coding practices, such as the isolation of side effects and the use of environment variables for configuration instead of hardcoding values.
- [PROMPT_INJECTION]: The skill is designed to process external data from ticket and GitHub issue descriptions, which represents a surface for indirect prompt injection. This risk is inherent to the functionality of a coding assistant and is mitigated by the instructions to run tests and other quality gates before completion. 1. Ingestion points: Ticket and GitHub issue descriptions (SKILL.md). 2. Boundary markers: Not explicitly defined for external content. 3. Capability inventory: The agent can write code and execute shell commands to run tests, linters, and build scripts (SKILL.md). 4. Sanitization: Not mentioned for the input ticket content.
Audit Metadata