github-issue-creator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection]: The skill is designed to process untrusted data from users, such as voice notes and error logs, which creates a surface for indirect prompt injection. 1. Ingestion points: User-provided notes, logs, and dictation mentioned in SKILL.md. 2. Boundary markers: The instructions do not define specific delimiters for separating user input from the skill's instructions. 3. Capability inventory: The skill is instructed to write markdown files to the repo's /issues/ directory. 4. Sanitization: The skill includes a proactive security guideline to replace sensitive data like [USER_ID] with placeholders, which reduces the risk of accidental data exposure.
Audit Metadata