make-issue-spec
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied task descriptions to generate new markdown files in the issues/ directory, which presents an attack surface for indirect prompt injection.
- Ingestion points: User-provided task descriptions and implementation plans (SKILL.md).
- Boundary markers: None provided; the skill does not specify the use of delimiters or instructions to ignore embedded commands in the generated content.
- Capability inventory: The skill possesses the capability to write files to the local filesystem and execute Git commands.
- Sanitization: The instructions do not include validation or escaping of the user-provided content before it is written to a file.
- [COMMAND_EXECUTION]: The skill instructs the agent to interact with the shell to perform version control operations.
- Evidence: Instructions to 'Stage this in Git if you have permissions' (SKILL.md).
Audit Metadata