to-issues
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions as a legitimate tool for project management. It reads project specifications and generates implementation tickets, utilizing a human-in-the-loop (HITL) process for approval before publishing changes to an issue tracker.- [PROMPT_INJECTION]: The skill has an inherent surface for indirect prompt injection due to its core functionality.
- Ingestion points: The skill reads full bodies and comments from existing issues and URLs provided as arguments in SKILL.md.
- Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore embedded commands when reading fetched content.
- Capability inventory: The skill can explore the codebase and publish new issues to a project tracker (SKILL.md).
- Sanitization: No specific validation or sanitization steps are defined for the content fetched from the issue tracker.
Audit Metadata