to-prd
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from the repository and conversation context to generate output for an issue tracker.
- Ingestion points: Repository files and conversation history.
- Boundary markers: Absent. There are no instructions for the agent to distinguish between the content of the files it reads and the instructions it should follow.
- Capability inventory: The agent has permissions to explore the repository (read) and publish to an issue tracker (write).
- Sanitization: No explicit sanitization or validation of the processed data is defined in the skill.
Audit Metadata