snap-issues
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its ingestion of untrusted data.
- Ingestion points: In SKILL.md, the process recursively fetches and reads content from user-provided issue references, Pull Requests, URLs, or local file paths.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when the agent processes the retrieved external content.
- Capability inventory: The skill has the capability to write to the repository using
gh issue createandgh issue comment, and performs broad codebase exploration across all scripts. - Sanitization: There is no explicit requirement for the agent to sanitize, escape, or validate the content fetched from external sources before using it to generate issue titles or descriptions.
Audit Metadata