plan-validator
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script located at
aura-frog/scripts/plans/validate-plan-tree.shusing the Bash tool. This operation is the primary purpose of the skill, used to validate the integrity of plan files against specified invariants. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from markdown files within the
.claude/plans/directory. - Ingestion points: Files located at
.claude/plans/*.md(mentioned in SKILL.md). - Boundary markers: None explicitly defined in the skill instructions.
- Capability inventory: Uses the
Bashtool to execute the validation script (SKILL.md). - Sanitization: Not explicitly documented; the skill relies on the
validate-plan-tree.shscript to parse and validate the node fields.
Audit Metadata