manual-planning
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses Python standard library scripts to automate implementation planning. Analysis of the scripts shows they perform local file operations and standard git commands to track plan status.
- [DYNAMIC_EXECUTION]: The scripts check-plan.py and plan-status.py use importlib.util to dynamically load a shared internal helper (_events.py). This implementation is restricted to local sibling files within the skill's own directory, representing a low-risk pattern for code modularization.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests Markdown plan files which may include user-provided content in fields like Notes or Resume. While this presents a surface for indirect prompt injection, the scripts utilize structured Markdown parsing and delimiters to maintain data integrity.
Audit Metadata