one-bug-triage-prep
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external bug tracking systems, creating an attack surface for indirect prompt injection.
- Ingestion points: The skill fetches external data using the
list-bugsandget-task-detailstools as described in the Workflow section of SKILL.md. - Boundary markers: The instructions lack explicit delimiters or specific warnings to the model to treat fetched content as data and ignore any instructions embedded within the bug reports.
- Capability inventory: The skill utilizes data retrieval tools (
list-bugsandget-task-details) to populate structured triage templates. - Sanitization: There is no evidence of sanitization, filtering, or validation logic applied to the content retrieved from the external tracker before it is processed by the model.
Audit Metadata