orchestrate-project-blueprint
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON data from project files using specific HTML comments like '' as boundaries. Capability inventory includes file system access and local server hosting, with sanitization performed via schema validation in 'assets/templates/progress/progress-math.mjs'.
- [COMMAND_EXECUTION]: The agent is instructed to run local Node.js scripts such as 'init-project-authority.mjs' and 'validate-project-authority.mjs' to manage blueprints.
- [DYNAMIC_EXECUTION]: A local HTTP server is initiated on '127.0.0.1' via 'scripts/project-board.mjs' to host a progress dashboard, utilizing the Node.js built-in 'http' module.
Audit Metadata