to-tickets
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is instructed to ingest and process content from external URLs, issue trackers, and specification documents.\n
- Ingestion points: File
SKILL.mdinstructs the agent to fetch and read the "full body and comments" from external references provided by the user.\n - Boundary markers: The skill does not define explicit delimiters or instructions to the agent to ignore potentially malicious commands embedded within the fetched external content.\n
- Capability inventory: The agent is authorized to read the local codebase, write local files to the
.scratch/directory, and interact with configured issue tracker APIs.\n - Sanitization: No specific data validation or sanitization routines are defined for the external inputs before they are incorporated into the agent's reasoning process.\n- [EXTERNAL_DOWNLOADS]: The skill is designed to interact with external platforms like GitHub and Linear to retrieve issue context and publish generated tickets. These interactions are consistent with the primary purpose of the skill.
Audit Metadata