build
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains instructions to fetch content from an issue tracker based on user-provided references, which introduces a surface for processing untrusted data.
- Ingestion points: The
SKILL.mdfile instructs the agent to fetch ticket details from an external issue tracker. - Boundary markers: The instructions do not specify the use of delimiters or provide 'ignore instructions' warnings for the fetched data.
- Capability inventory: The skill orchestrates code implementation and review via the
risk-firstandcode-reviewtools. - Sanitization: There are no explicit sanitization or validation steps defined for the external ticket content.
Audit Metadata