brainstorming
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its requirement to ingest project context.
- Ingestion points: The skill instructs the agent to check the current project state, including files, documentation, and recent commits (SKILL.md).
- Capability inventory: The skill possesses the ability to write new files to the 'docs/plans/' directory, commit changes to git, and use tool extensions like 'superpowers:using-git-worktrees' to manage workspaces (SKILL.md).
- Boundary markers: No explicit delimiters or instructions to ignore potential commands within the project files are provided.
- Sanitization: There are no steps defined to validate or sanitize the content of the project files before the agent processes them.
Audit Metadata