tracer-to-tickets
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches content from user-provided local paths or remote URLs (such as issue bodies and comments) to populate context for ticket generation.\n- [COMMAND_EXECUTION]: The skill performs file-system operations by writing markdown files to a local directory (
.tracer/) and interacts with external service APIs to create issues.\n- [PROMPT_INJECTION]: The skill processes untrusted data from external sources, creating a surface for indirect prompt injection. 1. Ingestion points: Reads issue bodies and comments from external URLs or local files. 2. Boundary markers: None explicitly used. 3. Capability inventory: Includes writing local files and creating issues on external platforms. 4. Sanitization: Employs a mandatory user-in-the-loop checkpoint requiring approval of the generated breakdown before any data is written or published.
Audit Metadata