add-bug
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input in the form of bug descriptions and version numbers to modify a TypeScript source file (
packages/bugs/api/[v].ts). - Ingestion points: User-provided bug titles, descriptions, and affected versions.
- Capability inventory: The skill utilizes the agent's ability to modify local source code files.
- Boundary markers: The instructions do not specify any delimiters or safety markers to isolate the user-provided content from the surrounding code structure.
- Sanitization: There are no instructions for sanitizing, escaping, or validating the user input before it is interpolated into the TypeScript object, creating a risk where a malicious user could attempt to escape the string literals and inject arbitrary code.
Audit Metadata