ticket-trace
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external ticket trackers, creating a surface for indirect prompt injection. Ingestion points include Azure DevOps REST API, GitHub CLI, and JIRA. The capability inventory includes file system access via git, authenticated network requests, and image analysis. No boundary markers or sanitization logic are defined to mitigate malicious instructions embedded in tickets or annotated images.
- [EXTERNAL_DOWNLOADS]: The skill downloads ticket attachments (images) from well-known services like Azure DevOps to the local temporary directory for analysis via the Invoke-WebRequest command.
- [COMMAND_EXECUTION]: The skill utilizes local command-line tools including git for repository archaeology and the az CLI for retrieving Entra authentication tokens.
Audit Metadata