skills/shipshitdev/skills/icp/Gen Agent Trust Hub

icp

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files which could contain instructions intended to influence the agent's behavior during analysis.
  • Ingestion points: The skill reads project documentation, README files, pricing tier copy, and codebase features to identify customer segments.
  • Boundary markers: A mandatory confirmation step requires the user to approve a full draft before the .agents/memory/icp.md file is written or updated.
  • Capability inventory: The skill is limited to reading project context and writing to a single specific markdown file path.
  • Sanitization: The skill relies on manual user review of the generated draft to mitigate the impact of potentially malicious instructions in the source files.
  • [SAFE]: The plugin metadata references the author's official site (https://shipshit.dev) for documentation and support, which is a legitimate vendor resource consistent with the author's identity.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 04:47 PM