ultra-plan
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the local codebase and user input to generate technical specifications, which presents a surface for indirect prompt injection.
- Ingestion points: The skill reads the 'current codebase' and 'interview responses' from the user (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions to treat codebase content as data rather than instructions.
- Capability inventory: The skill has the capability to read any file in the codebase and write to a SPEC.md file in the project root.
- Sanitization: No sanitization or filtering of codebase content is mentioned before it is processed by the agent.
Audit Metadata