plan-validator

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local shell script located at aura-frog/scripts/plans/validate-plan-tree.sh using the Bash tool. This operation is the primary purpose of the skill, used to validate the integrity of plan files against specified invariants.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from markdown files within the .claude/plans/ directory.
  • Ingestion points: Files located at .claude/plans/*.md (mentioned in SKILL.md).
  • Boundary markers: None explicitly defined in the skill instructions.
  • Capability inventory: Uses the Bash tool to execute the validation script (SKILL.md).
  • Sanitization: Not explicitly documented; the skill relies on the validate-plan-tree.sh script to parse and validate the node fields.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 10:06 AM