plan
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data such as project specifications, issues, and repository code.
- Ingestion points: The skill accepts a <spec, brief, issue, or request> argument and instructions to read source code and repository documentation.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between the skill's own instructions and potentially malicious instructions embedded in the input data.
- Capability inventory: The skill itself lacks dangerous capabilities; it does not perform file system writes, network requests, or subprocess executions. Its output is limited to text-based planning.
- Sanitization: There is no evidence of sanitization, filtering, or validation of the input data before it is processed by the agent's logic.
Audit Metadata