qrspi-plan
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from research, design, and structure files which could contain malicious instructions designed to influence the implementation plan.
- Ingestion points: The skill reads structure.md, design.md, and research.md as defined in SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded in the source documents.
- Capability inventory: The skill has the capability to write implementation steps to the local filesystem (plan.md).
- Sanitization: There is no requirement for the agent to sanitize or escape the content of the input files before processing.
Audit Metadata