to-tickets
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data which could contain malicious instructions designed to subvert the agent's task.
- Ingestion points: Processes existing conversation context and fetches content from external references such as specification paths, issue numbers, or URLs as described in the 'Gather context' section of
SKILL.md. - Boundary markers: The skill lacks explicit instructions for the agent to use boundary markers or to ignore embedded instructions when reading and processing external content.
- Capability inventory: The skill possesses the capability to write files to the local file system (under the
.scratch/directory) and perform network write operations to external issue trackers like GitHub or Linear. - Sanitization: There are no instructions for sanitizing, filtering, or validating the content retrieved from external sources before it is interpolated into the ticket generation workflow.
Audit Metadata