generate-status-report
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- JQL Input Sanitization: The skill includes a dedicated Python utility (
scripts/jql_builder.py) designed to validate and sanitize inputs used in Jira Query Language (JQL) strings. This is a positive security practice that prevents input parameters from altering the logic of database queries. - Data Processing Surface: The skill processes information from Jira issues to generate reports. This involves fetching data from Jira issues (including summaries and descriptions) via the
searchJiraIssuesUsingJqltool. While JQL parameters are sanitized, the issue content is formatted into reports without specific delimiters or sanitization. The capabilities utilized includesearchJiraIssuesUsingJql,getConfluenceSpaces,createConfluencePage, andupdateConfluencePage. This represents a standard surface for indirect prompt injection, which is typical for tools that aggregate and summarize external data. - Operational Transparency: The instructions explicitly require the agent to confirm project scope and target destinations with the user, ensuring that actions like publishing to Confluence are performed with oversight.
- Capability Alignment: The requested tools for Jira and Confluence are appropriately scoped to the skill's purpose of cross-platform status reporting.
Audit Metadata