to-issues
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests untrusted data from an external source (issue tracker) and uses it to perform actions (creating new issues).
- Ingestion points: In Step 1, the skill instructions direct the agent to fetch full bodies and comments of existing issues from the issue tracker.
- Boundary markers: The skill does not provide boundary markers or explicit instructions to treat the fetched content as data rather than instructions.
- Capability inventory: The skill has the capability to write and publish new issues to the issue tracker (Step 5).
- Sanitization: No sanitization or validation of the fetched issue content is specified before the agent processes it to draft new vertical slices.
Audit Metadata