better-planning-comprehend
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the repository, including source code, git logs, and local documentation files (
docs/better-planning/README.md). - Ingestion points: Git history, repository source code, and markdown documentation files.
- Boundary markers: No specific delimiters are defined to separate system instructions from the processed codebase content.
- Capability inventory: The agent can read files, write to a study queue (
~/.study/topics.md), and generate HTML files in/tmp/. - Sanitization: No explicit sanitization or filtering of codebase content is mentioned before it is incorporated into the agent's explanation.
- [DYNAMIC_EXECUTION]: The skill generates HTML files containing inline JavaScript for a "review capture" feature.
- Mechanism: The
assets/overview-template.htmlincludes a script that useslocalStorageto save user comments andBlobAPIs to trigger a JSON download in the user's browser. - Context: The execution occurs within the user's web browser, not the agent's execution environment. The instructions explicitly prohibit external dependencies, CDNs, or server-side components, minimizing the risk of cross-site scripting (XSS) or data exfiltration via the browser.
Audit Metadata