writing-plans
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely instructional, providing a template for generating Markdown implementation plans. It does not include executable code, network requests, or sensitive file access.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external specifications to generate plans. While this represents a potential injection surface, the risk is minimal as the output is a text-based planning document.
- Ingestion points: The skill ingests user-provided 'spec' or 'requirements' documents (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters or 'ignore' warnings for the input spec.
- Capability inventory: The skill's primary capability is writing Markdown files to the
docs/superpowers/plans/directory. - Sanitization: There is no explicit sanitization, validation, or filtering of the external content described in the instructions.
Audit Metadata