alplan
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx -y alignfirstto fetch and execute thealignfirstpackage from the Node package registry. This tool is a resource associated with the skill author. - [COMMAND_EXECUTION]: The instruction triggers the execution of the
alignfirstcommand-line tool with theguide planarguments to provide the agent with a planning protocol. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to follow rules and directions provided in the output of the
alignfirsttool. - Ingestion points: Standard output of the
npx -y alignfirst guide plancommand. - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: The command execution capability is utilized to run the initial tool; subsequent capabilities depend on the protocol generated.
- Sanitization: No explicit sanitization or validation of the tool's output is performed before the agent follows the instructions.
Audit Metadata