vp-issue-investigator
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources such as bug reports and repository scans, creating a surface where malicious instructions embedded in that data could attempt to influence the agent's behavior during the issue-filing process.
- Ingestion points: Primary evidence gathered from suspected software problems, bug reports, and repository scans (SKILL.md, Investigation section).
- Boundary markers: Absent; the instructions do not provide specific delimiters or ignore-instructions warnings for the external data being processed.
- Capability inventory: The skill possesses the capability to open issues in GitHub repositories and upload file evidence (e.g., screenshots or diagrams) through the vp-github skill (SKILL.md, Issue section).
- Sanitization: Absent; no instructions are provided to sanitize or validate the content of the analyzed reports before incorporating them into evidence-backed issues.
Audit Metadata