afk-to-tasks
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute the shell command
plannotator annotate --gate <tracking-folder>in step 5. This runs a local utility to process the generated task files. - [EXTERNAL_DOWNLOADS]: The agent is directed to fetch context from external issue trackers (via URLs or issue references) to read body content and comments for processing.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by ingesting untrusted data from external sources.
- Ingestion points: Reads full bodies and comments from user-provided issue tracker URLs or references in
SKILL.md. - Boundary markers: Absent; the instructions do not implement delimiters or 'ignore' instructions for the fetched external content.
- Capability inventory: The skill performs file writes to the local
docs/directory and executes theplannotatorCLI tool. - Sanitization: No validation or sanitization of the fetched issue data is specified before it is parsed by the agent.
Audit Metadata