qa-pr-requirements-analyzer
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources such as pull request descriptions and issue tracker discussions. This is a functional requirement for the skill's purpose, but it represents an attack surface where malicious instructions in issue comments could attempt to influence downstream agents.\n
- Ingestion points: Pull request titles, descriptions, branch names, and discussion threads, as well as linked issue descriptions and sub-task details.\n
- Boundary markers: The skill uses a defined markdown template with specific headers (Linked requirements, Expected behavior, Unresolved decisions) to structure its output brief.\n
- Capability inventory: The skill uses authorized tracker tools for read-only access. It is explicitly prohibited from inspecting code, changed files, or commits, and it cannot edit issues or post comments.\n
- Sanitization: Instructions require the agent to rephrase requirements for clarity and accurately attribute behaviors to specific sources, providing a layer of conceptual filtering.\n- [SAFE]: No other security concerns were identified. The logic provided by the author, Testomat.io, focuses solely on documented intent extraction without any obfuscation, persistence mechanisms, or unauthorized privilege escalation.
Audit Metadata