tt-bug-report
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
gh(GitHub CLI) command to automate the creation of bug reports in thetenstorrent/tt-lang,tenstorrent/tt-metal, andtenstorrent/tt-xlarepositories. - [DATA_EXFILTRATION]: The skill reads specific compiler artifacts, namely
/tmp/ttlang_initial.mlirand/tmp/ttlang_final.mlir, to include diagnostic context in reports sent to GitHub. This behavior is restricted to the specific files necessary for the skill's stated purpose. - [PROMPT_INJECTION]: The skill ingests untrusted user data to populate the bug report fields, presenting an indirect prompt injection surface.
- Ingestion points: User-provided input is captured via the
$ARGUMENTSvariable inSKILL.md. - Boundary markers: No specific boundary markers or instructions are provided to the agent to ignore potentially malicious instructions within the user's problem description.
- Capability inventory: The skill uses
ghfor network-based issue creation and reads files from the local filesystem. - Sanitization: The skill uses a quoted heredoc (
<<'EOF') in the bash script template, which prevents local shell expansion of the issue body but does not filter the content itself.
Audit Metadata