project-planner
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious code, obfuscation, or unauthorized access patterns were detected. The skill's primary function is to guide the AI in generating project documentation through predefined templates.
- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted user input to populate its documentation templates.
- Ingestion points: User project descriptions and functional requirements provided during the initial project understanding phase.
- Boundary markers: The skill uses Markdown headings, tables, and code blocks to structure and delimit the generated output.
- Capability inventory: The skill is designed to write Markdown files (.md) to the current working directory. No network operations or subprocess execution capabilities are present.
- Sanitization: None explicitly defined; however, the risk is minimal as the output is intended for human-readable documentation rather than automated execution.
- [COMMAND_EXECUTION]: The skill mentions saving documents to the current working directory (process.cwd()), which is an expected behavior for a project planning tool and does not involve arbitrary or malicious command execution.
Audit Metadata