rtk-triage
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data (GitHub issue and pull request content) which could potentially contain malicious instructions aimed at influencing the agent's behavior during analysis.
- Ingestion points: Issue and PR titles, labels, authors, and body text are fetched via the
ghCLI tool in Phase 1 ofSKILL.md. - Boundary markers: There are no explicit instructions or delimiters used to separate the external data from the agent's core instructions.
- Capability inventory: The skill possesses significant capabilities, including arbitrary command execution via the
Bashtool and file system modifications via theWritetool. - Sanitization: The skill does not define any sanitization, filtering, or validation steps for the content retrieved from GitHub before it is processed by the agent.
Audit Metadata