blueprint-discovery
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides an attack surface by ingesting and processing raw user-supplied text to drive workflow decisions and repository analysis tools.
- Ingestion points: The
feature_descriptioninput field described inSKILL.md. - Boundary markers: None identified; user input is processed for keyword triggers and uncertainty signals without explicit delimiters.
- Capability inventory: The skill is capable of executing shell commands via
ast-grepand invoking other internal skills such asmajestic-devops:devops-planandux-brief. - Sanitization: No explicit input sanitization or validation routines are defined for the
feature_descriptioninput. - [COMMAND_EXECUTION]: The skill utilizes a bash shell to run
ast-grepfor structural analysis of the codebase. This is a legitimate development task consistent with the skill's purpose of repository research and feature discovery.
Audit Metadata