refine
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
catto read project files and runs a Node.js script (memplan-cli.js) from a system-defined path to manage and update the project plan state. - [PROMPT_INJECTION]: Indirect Prompt Injection: The skill processes user-controlled data from
.memplan/plan.memand.memplan/progress. This creates a potential surface for indirect injection where data in these files could influence agent logic. - Ingestion points: Reads
.memplan/plan.memand.memplan/progressfiles. - Boundary markers: None identified in the parsing logic.
- Capability inventory: Shell command execution (
cat) and file write/update capabilities via thememplan-cli.jstool. - Sanitization: No explicit content validation or sanitization is observed in the processing of the plan entries.
Audit Metadata