project-planner
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a document generator, providing templates for project planning.\n- [SAFE]: The included Python scripts (generate_project_docs.py and validate_documents.py) are designed for local file operations, creating and analyzing Markdown documentation without external network dependencies or sensitive data access.\n- [SAFE]: The skill promotes secure development practices by using placeholders for sensitive configuration values (like API keys and database credentials) in its design templates, rather than encouraging hardcoded secrets.\n- [INDIRECT_PROMPT_INJECTION]: The skill allows for the interpolation of user-defined project names and features into documentation templates. While this creates a theoretical surface for indirect injection, the impact is low as the generated output is intended for documentation and manual review, not automated execution.\n
- Ingestion points: Project name, features, and components provided as command-line arguments to generate_project_docs.py.\n
- Boundary markers: Uses Markdown headers and structured sections in templates to delimit generated content.\n
- Capability inventory: Local file writing (open, write) in generate_project_docs.py to save requirements.md, design.md, and tasks.md.\n
- Sanitization: No explicit sanitization or escaping is performed on user inputs before interpolation into the templates.
Audit Metadata