cawplan-my-work
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard task management extension for the CawPlan platform. It primarily uses the
cawplanCLI to query ticket information, status updates, and associated pull requests. - [SAFE]: It explicitly incorporates
references/UNTRUSTED_CONTENT.md, which contains comprehensive instructions to treat ticket data as untrusted, preventing prompt injection attacks from embedded data. - [SAFE]: The skill follows least-privilege principles, focusing specifically on the current user's data (
user_idresolved from local tokens) rather than broad administrative access. - [SAFE]: No suspicious remote code execution or data exfiltration patterns were detected. All network operations are directed to the official
cawplanservice infrastructure via its CLI tool.
Audit Metadata