plain-guide
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
plainCLI tool viauv runto search framework documentation and public APIs. It also employs shell utilities likegrepto examine source code. These operations are within the expected scope of a technical guide skill. - [PROMPT_INJECTION]: The skill processes external content from documentation and source code, creating an indirect prompt injection attack surface.
- Ingestion points: SKILL.md (Processing output from
plain docs,grep, andreadtools) - Boundary markers: Absent
- Capability inventory: SKILL.md (Subagent uses shell commands for CLI interaction and file searching)
- Sanitization: Absent
Audit Metadata