multi-plan-search
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- Standard Data Ingestion: The skill retrieves user profile data (display name, email, time zone) and Planner task metadata. This information is necessary for the search and filtering functionality and is used within the context of the user's workspace.
- Local Tool Integration: It utilizes the
workiqLocal WorkIQ CLI tool via theaskcommand. This is a legitimate integration for accessing organizational data through a controlled interface. - Indirect Prompt Injection Surface: The skill processes task titles and plan names which could potentially contain untrusted content. However, the skill acts primarily as a reporting tool, presenting this data in a structured summary, which is a low-risk interaction pattern.
- Appropriate Scope: The permissions and tools requested are consistent with the skill's description of providing cross-plan task discovery.
Audit Metadata