plan
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute system-level commands including
grep,ls, andgit showto reconcile the current state of the repository against planning documents. It also invokes a custom utility nameddoctrinefor scaffolding plans and managing phase lifecycles. These commands are necessary for the skill's primary function of project coordination. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external, potentially untrusted documents which introduces a risk of indirect prompt injection.
- Ingestion points: Content is read from
slice-nnn.md,design.md, and the results of thereview showcommand. - Boundary markers: The instructions lack specific guidance on using delimiters or protective framing when the agent processes these external files.
- Capability inventory: The agent has the ability to read files, perform directory listings, use grep for searching, and execute commands via the
doctrinetool. - Sanitization: There are no instructions provided to validate or sanitize the input from design documents before they are used to generate phase criteria.
- [DYNAMIC_EXECUTION]: The skill requires the agent to author
plan.tomlfiles containing regular expressionpatternsfor theVT-n(Verification Test) mandates. These patterns are interpreted by thedoctrinetool at runtime to judge phase completion, representing the generation of executable logic.
Audit Metadata