ticket-triage
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to ingest and analyze arbitrary text provided by users in the form of customer messages or ticket descriptions. This creates a potential surface where instructions hidden within a ticket could influence the agent's behavior during the triage process.
- Ingestion points: The primary input argument
<ticket or issue description>defined in theUsagesection ofSKILL.md. - Boundary markers: The instructions do not define specific delimiters or protective wrappers (such as XML tags or unique markers) to clearly separate untrusted user data from the agent's operational instructions.
- Capability inventory: The workflow directs the agent to search external tools such as support platforms, knowledge bases, and project trackers, as well as to generate responses and perform escalations.
- Sanitization: The skill does not currently specify methods for filtering or sanitizing the input data before it is processed by the agent's analysis logic.
Audit Metadata