review-plan
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard development tools including
git rev-parse,git hash-object, andsha256sumfor version tracking and integrity verification.\n- [COMMAND_EXECUTION]: It executes a local scriptbun scripts/pre-execution-snapshot.mjsto handle snapshot building and verification, which is core to the skill's review logic.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project artifacts which presents an indirect prompt injection attack surface.\n - Ingestion points: Reads files such as
SPEC.md,PLAN.md,TASKS.md, andACCEPTANCE.md(detailed inSKILL.mdStep 0).\n - Boundary markers:
SKILL.mdcontains explicit instructions to treat all artifact content as data only and to report any embedded instructions as findings rather than executing them.\n - Capability inventory: The agent can run shell commands (
git,bun) and write to files (progress.md,planning-findings.md).\n - Sanitization: Instructions mandate that directives found in reviewable artifacts be flagged as defects.
Audit Metadata