fixissueno
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- External Content Processing: The skill is designed to fetch and analyze data from GitHub issues via the
get_issuetool. This creates a potential surface for indirect prompt injection as untrusted data enters the agent context (ingestion point: SKILL.md). There are no explicit boundary markers or sanitization steps defined to delimit the external issue content from the system instructions. However, this is a standard risk for tools designed to process external user-generated content and is managed by general agent safety guardrails. - Agent Behavior Constraints: The instructions include a requirement for the agent to withhold its thinking process and status updates until a solution is ready. This is a specific operational instruction and does not impact the security or integrity of the skill.
Audit Metadata