octocode-plan
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides configuration instructions for the user to install the
octocode-mcptool usingnpx -y. While this is presented as a setup step for the user, it involves downloading and executing code from a public registry. - [COMMAND_EXECUTION]: During the verification phase (Phase 4), the agent is instructed to execute shell commands such as
npm run build,npm run lint, andnpm testto confirm the integrity of implementation changes. - [PROMPT_INJECTION]: The skill's architecture involves ingesting data from external research and local codebase analysis to generate implementation plans and code edits, creating a surface for indirect prompt injection.
- Ingestion points: External repository findings and local codebase analysis delegated to
octocode-researcherandoctocode-researchskills (SKILL.md). - Boundary markers: None explicitly defined to separate untrusted research data from the planning logic.
- Capability inventory: Filesystem
Writeaccess and the ability to execute shell commands for building and testing code (SKILL.md). - Sanitization: Relies on a 'Decision Framework' with confidence levels and mandatory human approval gates before implementation phases.
Audit Metadata