se-good-plan
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and metadata do not contain any malicious patterns or security risks. The framework is designed to increase user control over agent autonomy through strict approval gates.
- [PROMPT_INJECTION]: No attempts to bypass safety filters or override agent behavior were found. The skill explicitly forbids agent self-approval and requires direct user confirmation for material decisions.
- [DATA_EXFILTRATION]: The skill does not access sensitive file paths (such as credentials or SSH keys) and does not perform any unauthorized network operations.
- [OBFUSCATION]: No encoded content, zero-width characters, or homoglyph-based attacks were detected in the files.
- [REMOTE_CODE_EXECUTION]: There are no instructions or patterns for downloading and executing external code or scripts from unverified sources.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external data like PRDs and implementation evidence, it includes strong mitigation mechanisms. These include mandatory 'Execution Contracts', 'Pre-Phase Plan Rebase Gates', and 'Product Decision Delta' audits that ensure the agent remains aligned with user-confirmed intent rather than blindly following instructions embedded in ingested data.
Audit Metadata