to-tickets
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface by processing untrusted data from external sources provided by the user.
- Ingestion points: In the 'Gather context' step, the skill fetches and reads the full body and comments of external references, including specification paths and URLs.
- Boundary markers: The instructions lack specific delimiters or warnings to prevent the agent from obeying instructions embedded within the fetched external documents.
- Capability inventory: The skill is capable of writing files to the local filesystem (within the
.scratch/directory) and publishing content to external issue trackers like GitHub or Linear. - Sanitization: There is no evidence of sanitization, filtering, or validation performed on the external content before it is processed to generate new tasks.
Audit Metadata