skills/obra/clank/Writing Plans/Gen Agent Trust Hub

Writing Plans

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to take brainstorming or design inputs and transform them into implementation plans containing Python code and shell commands (such as pytest and git commit). There is a risk that malicious instructions present in the input data could be incorporated into the generated plan, leading to the execution of unintended code or commands when the plan is followed.
  • Ingestion points: Brainstorming or design context provided to the agent before planning.
  • Boundary markers: The skill does not utilize specific boundary markers or instructions to the agent to disregard potentially malicious content within the input data.
  • Capability inventory: The skill generates implementation steps including file creation, shell command execution (pytest), and version control operations (git add/commit).
  • Sanitization: No explicit sanitization or validation of the input brainstorming data is performed before it is used to generate the plan components.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 06:18 PM