to-issues
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from existing GitHub issues which acts as an untrusted data source.
- Ingestion points: External data is ingested via the
gh issue viewcommand in Step 1. - Boundary markers: The skill does not define delimiters or provide instructions to ignore potentially malicious content within the ingested issue.
- Capability inventory: The skill has the capability to explore the codebase and create new GitHub issues via
gh issue create. - Sanitization: No specific sanitization or validation of the fetched content is identified, though the mandatory 'Quiz the user' step in Step 4 serves as a manual review checkpoint.
Audit Metadata