plan-risk
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is configured to automatically process untrusted external data when a plan is created or an API is detected.
- Ingestion points: Data enters the agent's context through the
ON:plan_createdandON:external_api_detectedtriggers defined inSKILL.md. - Boundary markers: There are no defined delimiters or instructions to the agent to ignore embedded commands within the ingested plans.
- Capability inventory: The provided skill content contains no executable scripts, shell commands, or network-enabled tools.
- Sanitization: No input validation or sanitization mechanisms are present for the content being analyzed.
Audit Metadata