plan-phase-executor
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands including
make,uv, andpnpmto build, lint, and audit the codebase. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes and follows instructions from plan files located in
docs/plans/. - Ingestion points: Implementation details and verification tasks are read from markdown files in the
docs/plans/directory. - Boundary markers: No explicit boundary markers or 'ignore' instructions are used when interpolating content from the plans into the implementation workflow.
- Capability inventory: The skill possesses file-write access and the ability to execute arbitrary build and package manager commands (
make,uv,pnpm). - Sanitization: There is no evidence of sanitization or content validation performed on the ingested plan data before it influences the agent's actions.
Audit Metadata