create-plan
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by reading project files like
README.mdand documentation to generate a plan. While this presents an ingestion surface for indirect prompt injection, the risk is mitigated by the skill's explicit instruction to operate in read-only mode and its lack of network or file-writing capabilities. - Ingestion points: Project files including
README.md,docs/,CONTRIBUTING.md,ARCHITECTURE.md, and other relevant codebase files. - Boundary markers: None specified for the read content.
- Capability inventory: The skill is strictly restricted to read-only operations and does not use any tools for network access, file modification, or command execution.
- Sanitization: No explicit sanitization or escaping of the ingested file content is mentioned.
Audit Metadata