to-tickets
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external content such as specifications, issue bodies, and comments from URLs provided by the user. This data is then used to generate ticket descriptions and acceptance criteria.
- Ingestion points: SKILL.md instructs the agent to fetch it and read its full body and comments for any user-provided reference.
- Boundary markers: There are no explicit instructions or delimiters used to isolate external content or warn the agent against following instructions embedded within the fetched data.
- Capability inventory: The skill possesses the ability to write to the local file system (under the .scratch/ directory) and interact with external APIs for trackers like GitHub and Linear.
- Sanitization: The instructions do not specify any validation or sanitization of the fetched content before it is processed or written to tickets.
- [COMMAND_EXECUTION]: The skill explicitly directs the agent to perform file system operations, specifically writing markdown files to a .scratch/ directory to represent tickets.
Audit Metadata