ticket-ship
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of high-level natural language instructions for organizing developer workflows. It contains no executable scripts, hardcoded credentials, or external network requests to untrusted domains.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface related to processing untrusted data.
- Ingestion points: Data is ingested from ticket trackers such as Jira, Linear, and acli (SKILL.md).
- Boundary markers: No explicit boundary markers or delimiters are defined to separate untrusted ticket data from the agent's instructions.
- Capability inventory: The skill orchestrates finding/starting PRs, changing ticket statuses, and drafting stakeholder messages.
- Sanitization: No explicit sanitization or validation of the ingested ticket content is performed within these instructions.
Audit Metadata