plan-design-review

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute git and gh (GitHub CLI) commands. Specifically, it runs git log, git diff, and gh pr view to determine the review context, identify base branches, and analyze recent commits. These commands are consistent with the skill's stated purpose of performing project-aware design reviews.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by reading plan documents, git diffs, and project files like CLAUDE.md or DESIGN.md.
  • Ingestion points: Content is read via git diff, git log, and direct file reads of the plan and documentation files.
  • Boundary markers: The instructions do not specify the use of strict delimiters or sanitization protocols when the agent processes the content of these external files.
  • Capability inventory: The skill has access to Bash for command execution and Edit for modifying files.
  • Sanitization: There is no evidence of explicit sanitization or escaping of external content before it is interpolated into the agent's reasoning process.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 08:35 AM