ticket
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external source (Jira tickets), creating a surface for indirect prompt injection attacks.
- Ingestion points: Untrusted content is ingested from the
atlassian_get_issuetool, including the ticket summary, description, comments, and acceptance criteria. - Boundary markers: The instructions do not define any delimiters or safety markers to isolate external content from the agent's primary instructions.
- Capability inventory: The skill's primary function is to retrieve and display information. It does not appear to have access to sensitive file operations or arbitrary command execution.
- Sanitization: No sanitization, escaping, or validation logic is present to filter out potentially malicious instructions embedded within the Jira ticket data.
Audit Metadata