to-tickets
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, which could contain malicious instructions designed to influence the agent.
- Ingestion points: Step 1 in SKILL.md instructs the agent to fetch and read the full body and comments of external issue URLs or specification paths.
- Boundary markers: The instructions do not provide explicit delimiters or warnings to the agent to ignore potentially malicious commands embedded in the external text.
- Capability inventory: The skill has the ability to write files to a local .scratch/ directory and perform network operations to publish issues to trackers like GitHub or Linear.
- Sanitization: No sanitization or filtering logic is defined for the external content before it is processed or re-published.
- [EXTERNAL_DOWNLOADS]: The skill fetches data from external project management platforms and files.
- Evidence: Step 1 involves fetching content from references such as issue numbers or URLs provided by the user.
- Context: The data is retrieved from well-known services like GitHub and Linear to inform the ticket creation process. This is a standard and expected functionality for this skill's use case.
Audit Metadata