ds-plan-reviewer
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill is an internal workflow manager that enforces a 'Plan Review' gate before implementation starts.
- [COMMAND_EXECUTION]: The skill utilizes local Python scripts through
uv runasPreToolUsehooks (ds-reviewer-readonly-guard.py) to enforce read-only restrictions on subagents. These are used as security controls rather than attack vectors. - [DATA_EXPOSURE]: The skill defines a subagent that reads project-specific documentation (
.planning/PLAN.md,.planning/SPEC.md). Access is confined to the local project directory and restricted to read-only tools (Read,Glob,Grep,Bash(read-only)).
Audit Metadata