task-planning
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface where it ingests untrusted data that could influence the agent's behavior.
- Ingestion points: The skill is designed to process external inputs such as GDD (Game Design Document) sections and sprint planning data as described in the 'Quick Start' section of
SKILL.md. - Boundary markers: Absent; the templates provided do not include delimiters or instructions to ignore potential commands embedded within the user stories or design documents being processed.
- Capability inventory: The skill utilizes
Read,Write,Grep, andGlobtools. This allows the agent to read from and write to the local file system based on the results of the planning process. - Sanitization: Absent; there is no evidence of filtering or validation of the external content before it is incorporated into the agent's planning context.
Audit Metadata