github-issue-creator
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of processing untrusted data.
- Ingestion points: The skill explicitly processes "unstructured bug input," "error logs," "voice notes," and "support notes" (SKILL.md).
- Boundary markers: No delimiters (like XML tags or triple quotes) or explicit "ignore instructions in input" warnings are provided to separate data from the system instructions.
- Capability inventory: The skill is instructed to write markdown files to the local filesystem in the
/issues/directory. - Sanitization: While the skill encourages using placeholders for sensitive data (e.g.,
[USER_ID]), it lacks sanitization or filtering to prevent the agent from executing instructions hidden within the logs themselves.
Audit Metadata