ds-plan
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
uv run python3to execute multiple internal scripts for process enforcement, such asds-post-subagent-guard.py,ds-pre-subagent-clear.py, andphase-gate-guard.py. These scripts are located within the vendor's own plugin root and skill directory structure. - [COMMAND_EXECUTION]: Employs dynamic context injection at load time using the
!commandsyntax to executeload-constraints.py. This is used to initialize state-based constraints for theds-planworkflow. - [COMMAND_EXECUTION]: Utilizes a
Monitorcommand to track the progress of long-running background tasks by tailing local log files. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (e.g., CSV and Parquet files) during its profiling phase.
- Ingestion points: Reads local data files for shape, type, and quality analysis; reads
.planning/SPEC.mdfor task generation. - Boundary markers: Missing; the skill directly processes the contents of these files using standard data science libraries (pandas).
- Capability inventory: The skill and its subagents have access to
Bash,Read,Glob,Grep, and the ability to run local Python scripts viauv. - Sanitization: No specific sanitization or filtering of data file content is mentioned before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill dispatches 'general-purpose' subagents using a
Task()function, specifically restricting their capabilities toRead,Glob,Grep, andBashto prevent unauthorized file modifications during read-only profiling tasks.
Audit Metadata