triage
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read and analyze untrusted external data, creating a potential surface for indirect instructions to influence agent behavior.
- Ingestion points: The agent is instructed to read
AGENTS.md,CONTRIBUTING.md, issue reports, user comments, and pull request content as described inSKILL.md. - Boundary markers: The instructions lack explicit delimiters or guidance for the agent to distinguish between data and potential instructions embedded in external reports.
- Capability inventory: The skill focuses on triage and analysis, though it references other skills (
fix-issue,review-issue) for downstream actions like implementation and review. - Sanitization: There is no mention of sanitizing or validating the content retrieved from external issue trackers or version control systems.
Audit Metadata