forge-plain
Warn
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill manages the creation and execution of shell scripts (such as
.shor.ps1) within thetest_scripts/directory to facilitate environment setup and testing procedures. - [REMOTE_CODE_EXECUTION]: The skill generates and executes local scripts incorporating user-defined logic and also invokes the
codeplainCLI tool, which communicates with a remote API athttps://api.codeplain.aifor code rendering. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. User-provided information collected during the multi-phase QA interview is used to author specification files and testing scripts without explicit sanitization.
- Ingestion points: User input captured during Phases 1, 2, and 3 via the
AskUserQuestiontool and free-form prompts. - Boundary markers: No specific delimiters or "ignore" instructions are employed to isolate user-provided content from the generated specification structures or script templates.
- Capability inventory: The agent has permissions to write files to the workspace and execute generated shell scripts and the
codeplainCLI. - Sanitization: The workflow relies on iterative manual review by the user and internal automated review tools rather than programmatic sanitization or escaping of external content before its use in executable contexts.
- [EXTERNAL_DOWNLOADS]: During the rendering and validation process, the skill interacts with external services hosted on the
api.codeplain.aidomain, which is a vendor-owned resource.
Audit Metadata