shift-left-testing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external source (Jira Story descriptions, acceptance criteria, and comments) that is subsequently analyzed to generate test plans and Jira updates. This creates a surface for indirect prompt injection if an attacker can control the content of the Jira issues.
- Ingestion points: Data enters the context through
bun run jira:sync-issues get <STORY_KEY> --include-comments(SKILL.md §Phase 1). - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' commands when processing the ingested text.
- Capability inventory: The skill possesses significant write capabilities, including updating Jira issue fields, adding comments, and performing workflow transitions (SKILL.md §Phase 3).
- Sanitization: There is no evidence of input validation or sanitization of the external content before it is processed by the agent.
Audit Metadata