sprint-operations
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process data from external task trackers (e.g., Jira, Linear, GitHub Issues) to generate metrics and reports. This ingestion of untrusted data creates a surface for indirect prompt injection attacks.\n
- Ingestion points: Tracker exports and live API data as described in SKILL.md and the references directory.\n
- Boundary markers: No explicit delimiters or instructions to disregard embedded commands in tracker data are provided.\n
- Capability inventory: Data computation and Markdown report generation as defined in the provided reference files.\n
- Sanitization: No validation or escaping of the ingested tracker data is implemented in the defined workflow.
Audit Metadata