kata-remove-phase
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands including
find,rm -rf,mv, andgit committo manage project directories and files. These operations are scoped to the.planning/directory and its subdirectories, serving the intended purpose of roadmap maintenance. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from
.planning/ROADMAP.mdand.planning/STATE.mdto determine which phases to remove or renumber. While explicit boundary markers are absent, the skill's capabilities are restricted to file and directory manipulation within the planning folder, posing no significant risk to the host system. - Ingestion points:
.planning/STATE.md,.planning/ROADMAP.md(read viacatandgrepinSKILL.md). - Boundary markers: Absent.
- Capability inventory: Directory deletion (
rm -rf), file/directory renaming (mv), and version control (git commit) restricted to the.planning/folder. - Sanitization: Absent; the skill relies on the structure of the Markdown files for parsing.
- [DYNAMIC_EXECUTION]: The skill executes a local utility script,
scripts/kata-lib.cjs, using the Node.js runtime. This script performs configuration lookups and roadmap format checks. The script uses only built-in Node.js modules (fs,path) and its operations are limited to the project's local directory.
Audit Metadata