project-planner

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious code, obfuscation, or unauthorized access patterns were detected. The skill's primary function is to guide the AI in generating project documentation through predefined templates.
  • [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted user input to populate its documentation templates.
  • Ingestion points: User project descriptions and functional requirements provided during the initial project understanding phase.
  • Boundary markers: The skill uses Markdown headings, tables, and code blocks to structure and delimit the generated output.
  • Capability inventory: The skill is designed to write Markdown files (.md) to the current working directory. No network operations or subprocess execution capabilities are present.
  • Sanitization: None explicitly defined; however, the risk is minimal as the output is intended for human-readable documentation rather than automated execution.
  • [COMMAND_EXECUTION]: The skill mentions saving documents to the current working directory (process.cwd()), which is an expected behavior for a project planning tool and does not involve arbitrary or malicious command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 10:06 AM