task-planning

Pass

Audited by Gen Agent Trust Hub on Nov 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where it ingests untrusted data that could influence the agent's behavior.
  • Ingestion points: The skill is designed to process external inputs such as GDD (Game Design Document) sections and sprint planning data as described in the 'Quick Start' section of SKILL.md.
  • Boundary markers: Absent; the templates provided do not include delimiters or instructions to ignore potential commands embedded within the user stories or design documents being processed.
  • Capability inventory: The skill utilizes Read, Write, Grep, and Glob tools. This allows the agent to read from and write to the local file system based on the results of the planning process.
  • Sanitization: Absent; there is no evidence of filtering or validation of the external content before it is incorporated into the agent's planning context.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 6, 2026, 09:09 AM