ralph-json-create-issues
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes markdown files from the project environment to generate structured data. This creates a surface where instructions embedded in those files could influence the agent during the conversion process. * Ingestion points: Markdown files located in the .claude/plans/, plans/, and prds/ directories. * Boundary markers: None explicitly defined; the agent is instructed to read the full markdown file content. * Capability inventory: File system read and write access within the project directories. * Sanitization: No specific content validation or escaping is defined beyond adhering to the JSON schema.
Audit Metadata