execute-plan

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands for project management, specifically git operations (git commit, git add, git rev-parse, git log, git diff) and text processing (grep, sed). These commands are used to manage the state of the plan and verify consistency between files.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external plan.md and spec.md files, which contain instructions for implementation and review tasks.
  • Ingestion points: plan.md, spec.md, and project-specific rules in .claude/rules/.
  • Boundary markers: Uses specific Markdown headers and status tags (e.g., ### Wave N, [AC-affecting]) to delimit content.
  • Capability inventory: File system modification (via subagents), git repository mutations, and invocation of other local skills.
  • Sanitization: Implements a multi-agent review process (Seats A, B, and C) and an "Autonomy Gate" that requires high confidence (>= 0.80) for automated decisions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 02:45 AM
Security Audit — agent-trust-hub — execute-plan