knowledge-plan
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local Python scripts (
knowledge-binding.py,get-market-config.py,run-metrics.py) and shell utilities (mkdir,sed,date) for environment setup, project directory management, and metric recording. All commands are scoped to the skill's root and project directories. - [EXTERNAL_DOWNLOADS]: The skill performs web searches to ground research topics in existing information. This is a primary function of the research pipeline and is used to avoid generating sub-questions for topics with no searchable data.
- [PROMPT_INJECTION]: The skill ingests untrusted user input through the
--topicparameter and processes external data from web searches. While this represents an indirect prompt injection surface, the skill implements proper slugification of user input for file paths and uses the data strictly for thematic decomposition. - Ingestion points: User-provided
--topicparameter; search results fromWebSearchsnippets. - Boundary markers: None explicitly defined for search data interpolation.
- Capability inventory:
Writeaccess to the local project metadata directory;Bashexecution of internal scripts. - Sanitization: Implements strict alphanumeric slugification for topic-derived file paths to prevent command or path injection.
Audit Metadata