coordinating-implementation-across-teams
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external, user-editable sources such as Jira issues and Confluence pages, which could be used to host malicious instructions.
- Ingestion points: The skill utilizes several tools in the
bitwarden-atlassian-toolsplugin to fetch data, includingbitwarden-atlassian__get_issue,bitwarden-atlassian__get_issue_comments, andbitwarden-atlassian__get_confluence_page. - Boundary markers: The instructions lack explicit delimiters or warnings to the agent to disregard instructions potentially embedded within the Atlassian content being retrieved.
- Capability inventory: The
allowed-toolslisted in the frontmatter are restricted to read-only search and retrieval operations within the Atlassian suite. The skill is not granted capabilities for local file writes, arbitrary network requests, or shell command execution. - Sanitization: No explicit sanitization or filtering of the content retrieved from external sources is described in the skill instructions.
Audit Metadata