incremental-plan
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied specification documents which may contain malicious instructions designed to influence agent behavior.
- Ingestion points: Specification documents provided by the user as described in the workflow.
- Boundary markers: The instructions do not define delimiters or 'ignore instructions' warnings for the content within the specification files.
- Capability inventory: The skill has the capability to read local files and write new Markdown files to the filesystem.
- Sanitization: The skill lacks explicit sanitization for the specification content or the resulting filename (
plan-<spec-name>.md), creating a surface for indirect prompt injection or potential path traversal.
Audit Metadata