to-tasks
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard shell commands, specifically
git config user.nameanddate +%F, to automatically populate author and date information in the generated task documentation.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from external plan files or session history to generate task lists. - Ingestion points: User-provided plan files and session discussion context.
- Boundary markers: None explicitly defined to ignore instructions within the source plan.
- Capability inventory: Includes reading project source code and writing new markdown files to the local project directory.
- Sanitization: No sanitization of the plan content is described before it is processed.
Audit Metadata