developing-tickets
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection because it ingests and processes data from external trackers (Jira, GitHub).
- Ingestion points: External issue descriptions are fetched and saved to the local file system in the
<issues_dir>directory (SKILL.md). - Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions that may be embedded within the fetched issue content.
- Capability inventory: The skill possesses file-write capabilities and the ability to transition the agent into 'Plan mode' for code implementation (SKILL.md).
- Sanitization: No sanitization, validation, or escaping of the external issue data is performed before it is passed to the
user-storyandestimationsub-skills.
Audit Metadata