plan-execution
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates standard shell commands for code verification and quality assurance.
- Evidence:
SKILL.mdrequires the use ofnpm test,npm run build,npm run lint, andtsc --noEmitas part of the verification checkpoints after each batch of tasks. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process implementation plans, which represent a surface for external data ingestion.
- Ingestion points: The skill ingests tasks and plans defined in user-provided implementation documents.
- Boundary markers: The skill uses a structured batching rhythm (3 tasks per batch) and mandatory checkpoints to provide natural process boundaries.
- Capability inventory: Shell execution capabilities are limited to standard development tooling (
npm,tsc). - Sanitization: The skill emphasizes security checks like parameterizing inputs and avoiding hardcoded secrets within the implemented code.
Audit Metadata