om-root-cause
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted input from issue trackers and repository files. It mitigates injection risks by including explicit instructions in
references/agentic-setup.mdto treat external content as data and ignore common injection patterns such as 'ignore previous instructions' or 'run this command'. - [DATA_EXFILTRATION]: The skill is designed to be read-only and does not have access to tools for external network communication or data exfiltration. The
references/rules.mdfile enforces a 'secrets hygiene' policy that strictly prohibits the extraction or surfacing of credentials, tokens, or environment files. - [COMMAND_EXECUTION]: Shell usage is restricted to read-only git operations and tracker API calls. The skill includes instructions to validate all externally-sourced values (like issue IDs or branch names) against a strict character whitelist before using them in shell commands to prevent command injection vulnerabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill has a high surface area for indirect injection as it ingests issue bodies, comments, and repository code. However, it mitigates this risk by providing clear boundary markers, instructing the agent to never treat data as instructions, and limiting the toolset to read-only operations that cannot affect the system state.
Audit Metadata