create-plans
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONDYNAMIC_CONTEXT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a multi-step research and planning workflow that ingests external data. 1. Ingestion points: The
workflows/research-phase.mdworkflow uses web search tools to fetch data which is then stored inFINDINGS.md. 2. Boundary markers: The skill uses structured XML tags like<task>,<action>, and<objective>in its templates to delimit instructions. 3. Capability inventory: Theworkflows/execute-phase.mdworkflow has the capability to execute shell commands and tool calls defined inPLAN.mdfiles. 4. Sanitization: The workflow does not specify explicit programmatic sanitization or filtering of the external content retrieved during the research phase. - [DYNAMIC_EXECUTION]: The skill's primary function involves generating
PLAN.mdfiles based on project briefs and roadmaps, which are subsequently parsed and executed as instruction sets. Theworkflows/execute-phase.mdfile describes a process for routing these instruction segments to subagents or the main agent context for execution, representing dynamic execution of generated content. - [DYNAMIC_CONTEXT_INJECTION]: The skill utilizes the dynamic context injection syntax
!date +%Y-%m-%dwithin thetemplates/research-prompt.mdfile to fetch the current system date. This is a benign use of the platform's features for environment-aware templating. - [COMMAND_EXECUTION]: The
references/cli-automation.mdreference file explicitly guides the agent to automate a variety of third-party command-line interfaces for services like Vercel, Stripe, and GitHub, facilitating extensive interaction with the local shell environment as part of the implementation workflow.
Audit Metadata