forge-create-issue
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user and the codebase, creating a surface for potential instruction injection. \n
- Ingestion points: User input provided via
$ARGUMENTSand project files read throughRead,Grep, andGlobtools. \n - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the research phase. \n
- Capability inventory: The skill utilizes
Bash,Edit, andWritetools, which could be abused if malicious instructions are processed. \n - Sanitization: No explicit sanitization or filtering of codebase content or user input is defined before processing.
Audit Metadata