comment
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external text data for posting as task comments.
- Ingestion points: User-provided
comment textandtask IDinSKILL.md. - Boundary markers: No delimiters or specific instructions are provided to the agent to treat the comment text as untrusted data.
- Capability inventory: The skill utilizes the
clickup_add_commenttool to write data to an external service (ClickUp). - Sanitization: There is no mention of sanitization or escaping of the user-provided text before it is processed by the tool.
Audit Metadata