to-spec
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted data from user conversations and repository contents.
- Ingestion points: Current conversation context and repository exploration (SKILL.md).
- Boundary markers: The skill does not define clear delimiters or specific warnings to ignore embedded instructions in the source text.
- Capability inventory: The agent is instructed to write and publish content to an external project issue tracker.
- Sanitization: No explicit validation or sanitization of the synthesized content is performed before publishing.
Audit Metadata