sprint-planning
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill instructions and output templates do not contain any malicious patterns, obfuscation, or unauthorized access attempts.
- [NO_CODE]: This skill consists entirely of markdown instructions and does not include any accompanying scripts or binary executables.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided data such as backlog items and team availability, creating a surface for indirect prompt injection. However, since the skill has no associated scripts or tools to execute commands, this surface is not exploitable.
- Ingestion points: User-supplied data via the '$ARGUMENTS' variable and conversational input for 'Backlog', 'Team', and 'Dependencies'.
- Boundary markers: The skill does not provide delimiters or instructions to the agent to ignore embedded commands within the user data.
- Capability inventory: No file system writes, subprocess execution, or network operations are present in the skill files.
- Sanitization: No sanitization or validation of external input is implemented.
Audit Metadata