pflow-backlog
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided task descriptions to create files in the documentation directory. It enforces structural limits like line counts and line width, which helps prevent extremely large injection payloads.
- [COMMAND_EXECUTION]: The skill executes local Bash scripts for file management. These scripts implement input validation for slugs using a restrictive regular expression and include path traversal guards to ensure that file operations are restricted to the intended backlog directory.
Audit Metadata