agent-plan
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied planning scopes and design questions to orchestrate tasks. This design creates an indirect prompt injection surface where external input could influence agent behavior.
- Ingestion points: User-provided planning scopes and design questions defined in the argument-hint of SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the instructions.
- Capability inventory: The skill has access to tools including Bash, Write, Edit, Read, Glob, and Grep in SKILL.md.
- Sanitization: There is no evidence of sanitization or filtering for the external content before it is processed by the agents.
- [COMMAND_EXECUTION]: The skill includes 'Bash' in its list of allowed tools. While this is used for planning and reporting, the combination of shell access and the processing of unsanitized user inputs increases the risk of executing unintended commands.
Audit Metadata