execute-plan
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands for project management, specifically git operations (
git commit,git add,git rev-parse,git log,git diff) and text processing (grep,sed). These commands are used to manage the state of the plan and verify consistency between files. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external
plan.mdandspec.mdfiles, which contain instructions for implementation and review tasks. - Ingestion points:
plan.md,spec.md, and project-specific rules in.claude/rules/. - Boundary markers: Uses specific Markdown headers and status tags (e.g.,
### Wave N,[AC-affecting]) to delimit content. - Capability inventory: File system modification (via subagents), git repository mutations, and invocation of other local skills.
- Sanitization: Implements a multi-agent review process (Seats A, B, and C) and an "Autonomy Gate" that requires high confidence (>= 0.80) for automated decisions.
Audit Metadata