to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from the current conversation context and the repository codebase to generate its output.
- Ingestion points: Untrusted data enters the agent context through the "current conversation context" and "codebase understanding" mentioned in the process section.
- Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" markers when processing the conversation history.
- Capability inventory: The skill has the capability to explore the repository and publish content to a project issue tracker (typically via a tool like
gh). - Sanitization: There are no explicit instructions to sanitize or escape data before publishing it to the issue tracker.
Audit Metadata