planning-tracker-builder
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates the creation and management of Google Sheets for planning cycles. It utilizes the standard
google-workspaceMCP to perform operations like copying files, reading sheet values, and modifying cell content. - [EXTERNAL_DOWNLOADS]: The installation instructions reference a public GitHub repository belonging to the author (
github.com/peter-tu-zynkr/zynkr-skill-builder). This is consistent with the author's identity and follows established development practices for skill distribution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user-pasted tables or chat blocks. It mitigates potential prompt injection risks by normalizing the input against a predefined schema and running a mandatory linting process that requires user confirmation before any data is written to the spreadsheet.
- [COMMAND_EXECUTION]: The skill writes spreadsheet formulas (e.g.,
COUNTIF,SUM) into Google Sheets cells using theUSER_ENTEREDoption. These formulas are standard spreadsheet functions and are executed within the Google Sheets platform, which is the intended behavior of the tool.
Audit Metadata