to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or suspicious activities were identified. The skill follows its stated purpose and requires user confirmation for technical decisions prior to data publication.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect injection surface: 1. Ingestion points: Repo exploration and conversation context (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Publishing to a project issue tracker (SKILL.md). 4. Sanitization: None. The risk is assessed as safe because the skill instructs the agent to check implementation seams with the user before publishing, ensuring a human review of the generated content.
Audit Metadata