task-preparation
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a planning and documentation tool designed for local repository task management. It defines a clear operational flow that focuses on context gathering and documentation generation without involving external code execution or network communication.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files, which represents a potential attack surface if those files contain malicious instructions.\n
- Ingestion points: The skill reads
task.md,index.md, and architectural documentation from the project workspace.\n - Boundary markers: The workflow enforces the use of structured markdown templates and requires explicit review pauses after drafting specs and plans.\n
- Capability inventory: Capabilities are restricted to reading workspace files, writing new documentation files, and performing git commits for reviewed documents.\n
- Sanitization: The skill relies on mandatory human oversight and approval checkpoints during the review pauses before any documents are committed or handed off to the execution stage.
Audit Metadata