plan-design-review
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to executegitandgh(GitHub CLI) commands. Specifically, it runsgit log,git diff, andgh pr viewto determine the review context, identify base branches, and analyze recent commits. These commands are consistent with the skill's stated purpose of performing project-aware design reviews. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by reading plan documents, git diffs, and project files like
CLAUDE.mdorDESIGN.md. - Ingestion points: Content is read via
git diff,git log, and direct file reads of the plan and documentation files. - Boundary markers: The instructions do not specify the use of strict delimiters or sanitization protocols when the agent processes the content of these external files.
- Capability inventory: The skill has access to
Bashfor command execution andEditfor modifying files. - Sanitization: There is no evidence of explicit sanitization or escaping of external content before it is interpolated into the agent's reasoning process.
Audit Metadata