kata-move-phase
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from project-level files to perform file system and version control actions. Ingestion points: Reads .planning/ROADMAP.md, .planning/STATE.md, and .planning/config.json to extract phase metadata and project versions. Boundary markers: None identified; the skill directly parses content from these files to drive its logic. Capability inventory: Includes directory renaming, file modification (ROADMAP.md, STATE.md, REQUIREMENTS.md), and git commit operations. Sanitization: No specific sanitization or validation of the data parsed from the planning files is mentioned in the instructions.
- [COMMAND_EXECUTION]: The skill performs several local command-line operations to manage the project state. It executes a bundled Node.js utility (scripts/kata-lib.cjs) for configuration and roadmap format checks. It also utilizes standard commands like git, cat, and grep to interact with the repository and project files.
Audit Metadata