youtrack
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of instructional markdown and reference files for YouTrack integration. It provides guidance on robust API usage and does not contain malicious code, obfuscation, or persistence mechanisms.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates interaction with YouTrack, an external system, by processing data such as issue summaries, descriptions, and comments which are potentially user-controlled.
- Ingestion points: The agent fetches issue data, project configurations, and command suggestions from the YouTrack instance (SKILL.md).
- Boundary markers: No specific delimiters or boundary markers for untrusted content are defined in the instructions.
- Capability inventory: The skill enables creating and updating issues, changing states, and executing commands (SKILL.md, references/commands.md).
- Sanitization: The instructions recommend URL-encoding queries and escaping reserved characters in commands to ensure proper parsing (references/query-language.md, references/commands.md).
Audit Metadata