master-plan-auditor
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a read-only auditor for local project files and does not modify data.
- [COMMAND_EXECUTION]: Utilizes standard system utilities such as git, grep, and sort. All external data parsed from files is validated against a strict regex before being used in shell commands, preventing command injection.
- [PROMPT_INJECTION]: The skill processes untrusted data from git logs and markdown files. 1) Ingestion points: docs/MASTER_PLAN.md and git commit logs. 2) Boundary markers: None identified. 3) Capability inventory: Executes read-only shell commands to gather evidence. 4) Sanitization: Employs a restrictive regex pattern (TASK|BUG|ROAD|IDEA|ISSUE)-\d+ to filter task IDs before command inclusion.
Audit Metadata