to-issues
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it ingests untrusted data from external sources.
- Ingestion points: Issue bodies and comments are fetched from the project's issue tracker (SKILL.md).
- Boundary markers: Absent. The instructions do not define delimiters or provide warnings to the agent to disregard potential instructions within the fetched data.
- Capability inventory: The agent is authorized to read codebase files and publish new issues to the tracker.
- Sanitization: Absent. There is no logic provided to sanitize or validate the external content before it is processed by the agent.
Audit Metadata