manual-planning

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill uses Python standard library scripts to automate implementation planning. Analysis of the scripts shows they perform local file operations and standard git commands to track plan status.
  • [DYNAMIC_EXECUTION]: The scripts check-plan.py and plan-status.py use importlib.util to dynamically load a shared internal helper (_events.py). This implementation is restricted to local sibling files within the skill's own directory, representing a low-risk pattern for code modularization.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests Markdown plan files which may include user-provided content in fields like Notes or Resume. While this presents a surface for indirect prompt injection, the scripts utilize structured Markdown parsing and delimiters to maintain data integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 10:41 PM