skills/rakaadi/agent-kit/writing-plan/Gen Agent Trust Hub

writing-plan

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill generates HTML artifacts that include remote scripts from well-known content delivery networks (CDNs), specifically Tailwind CSS (cdn.tailwindcss.com). These are reputable services commonly used for styling and their inclusion is documented as part of the tool's intended output.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data (user requirements and repository evidence) to generate plans which are subsequently reviewed by a sub-agent. This creates an attack surface for indirect prompt injection. * Ingestion points: User requirements and repository files. * Boundary markers: Enforces a strict 'Plan Contract' with headers like Goal, Architecture, and Tech Stack. * Capability inventory: File writing and sub-agent reviewer dispatch. * Sanitization: Implements a 'Plan Review Loop' to verify plan alignment with requirements.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 03:48 AM