build-planner
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured guidance for music app development, following browser-first best practices and maintaining a focused MVP scope within the workspace.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied "Episode strategy" inputs, which creates a potential surface for indirect prompt injection.
- Ingestion points: User-provided strategy text is used as the primary input for the build planning process in
SKILL.md. - Boundary markers: No specific delimiters or safety instructions are used to wrap or isolate the external strategy content.
- Capability inventory: The skill is granted
ReadandWritepermissions to manage build notes and project files. - Sanitization: There is no evidence of sanitization, filtering, or validation applied to the incoming strategy text.
Audit Metadata