to-issues
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from external sources, which is a standard surface for indirect prompt injection.
- Ingestion points: Reads issue bodies and comments from the issue tracker as described in SKILL.md.
- Boundary markers: The skill does not currently define delimiters to separate external data from system instructions.
- Capability inventory: The agent has the ability to explore the codebase and publish issues to an external tracker.
- Sanitization: No specific sanitization or filtering of external issue content is mentioned in the instructions.
Audit Metadata