story-implementation-planner

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data (Story Cards and Repo Context) to generate implementation plans, creating a potential surface for indirect injection.
  • Ingestion points: The agent is instructed to read 'Story Card' and 'Repo Context' data in the Core Workflow section of SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters or 'ignore' directives for the external data ingestion.
  • Capability inventory: The skill is purely instructional and does not define or use any tools for command execution, file system modification, or network access.
  • Sanitization: No sanitization or validation of the input data is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 05:58 PM
Security Audit — agent-trust-hub — story-implementation-planner