god-plan
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx -y godpowers@7 lintto download and run a package from the NPM registry. This executes external code to lint the project plan. - [REMOTE_CODE_EXECUTION]: The npx command enables the execution of remote code packages at runtime.
- [COMMAND_EXECUTION]: The skill executes shell commands via npx to perform linting tasks on the generated files.
- [INDIRECT_PROMPT_INJECTION]: The skill processes existing project documentation and source code which could contain malicious instructions designed to influence the agent's behavior. * Ingestion points: Reads STATE.md, PLAN.md, DECISIONS.md, and project source code in Step 1. * Boundary markers: The instructions do not specify delimiters or safety warnings to ignore embedded instructions in the source files. * Capability inventory: The skill is capable of writing to several project files and executing shell commands via npx. * Sanitization: No validation or sanitization of the content read from files is mentioned before processing.
Audit Metadata