content-calendar-planning
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Node.js utility (
calendar-engine.js) to process content planning data. The script is invoked with JSON arguments generated by the agent. The implementation is secure, using standard JSON parsing and local logic without exposing the system to arbitrary command injection or shell escapes. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided data (topics, titles, capacity) to generate a capacity report. While this involves processing untrusted data that is later read by the agent, the processing script has no dangerous capabilities such as network access, environment variable access, or file system write permissions, effectively nullifying the risk of exploitable injection.
- [EXTERNAL_DOWNLOADS]: All external references in the skill metadata and documentation point to the official website of the publisher (
aajconsult.com). These are informational links to templates and playbooks and do not involve the download of executable code or binary assets.
Audit Metadata