investigate-integration-test
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to ingest and analyze data from external sources, specifically issue reports and test artifacts. Because this content originates from outside the immediate environment, it could potentially contain instructions that affect the agent's reasoning. This is an inherent characteristic of tools that process external user-generated content.
- Ingestion points: Processes data from linked GitHub issues and test logs (SKILL.md).
- Boundary markers: No specific delimiters or safety warnings for embedded instructions are defined in the skill instructions.
- Capability inventory: The skill is restricted to analysis and suggesting fixes, with no explicit file-write or network-send capabilities beyond the initial download step.
- Sanitization: No explicit sanitization or validation of the ingested external content is described.
- External Data Retrieval: The skill includes instructions to download test logs and artifacts. This activity targets a well-known service and is performed within the context of the repository's associated organization, which is typical for development and debugging workflows.
Audit Metadata