to-issues
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted content from an external issue tracker.
- Ingestion points: In
SKILL.md, the agent is instructed to fetch the full body and comments of issues from an external tracker if an issue reference is provided. - Boundary markers: The instructions lack explicit delimiters or specific system-level warnings to the agent to treat external issue content strictly as data rather than instructions.
- Capability inventory: The skill has the capability to read the local codebase and write new issues (including titles, descriptions, and labels) to the issue tracker.
- Sanitization: There are no documented sanitization or escaping protocols for the content retrieved from external issue trackers before it is processed by the agent.
Audit Metadata