writing-plans
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided task specifications to generate structured implementation plans that include shell commands and code modifications. Since these plans are intended for execution by subsequent skills, a malicious specification could potentially lead to the generation and execution of harmful commands.\n
- Ingestion points: User-provided specifications or requirements for multi-step tasks.\n
- Boundary markers: The skill does not define boundary markers or explicit instructions to ignore embedded commands within the input data.\n
- Capability inventory: The resulting plans authorize file system modifications (creating/modifying files) and shell command execution (e.g., git, pytest).\n
- Sanitization: No input sanitization or validation steps are defined in the instructions.
Audit Metadata