ticket-graph
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill's code or instructions.\n- [COMMAND_EXECUTION]: The skill uses a Node.js CLI script (scripts/ticket-graph.mts) to process and update local ticket files, which is appropriate for its stated purpose.\n- [INDIRECT_PROMPT_INJECTION]: The tool ingests local Markdown files (scripts/engine.mts). The risk is minimized as the script strictly parses only specific YAML frontmatter fields (scripts/graph.mts) using a robust library (scripts/vendor/yaml.mjs) and lacks network or arbitrary execution capabilities.\n- [EXTERNAL_DOWNLOADS]: Dependencies for CLI management, schema validation, and YAML parsing are vendored locally, ensuring integrity and removing reliance on external registries at runtime.
Audit Metadata