discovery-planning
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation includes instructions for executing local Python scripts used for developer optimization and evaluation cycles. Evidence: The file
references/copilot_proposer_prompt.mddescribes apython -cscript for keyword analysis, andreferences/program.mdoutlines a command-line workflow for running a routing accuracy evaluation script. - [PROMPT_INJECTION]: The skill reads from local files that may contain user-provided content, presenting a surface for indirect prompt injection. Ingestion points:
exploration/session-brief.mdandexploration/exploration-dashboard.md. Boundary markers: None. Capability inventory: Use ofReadandWritetools alongside local command execution capabilities defined in reference files. Sanitization: No explicit sanitization of the input file content is performed before the agent processes it.
Audit Metadata