icp
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local repository files which could contain instructions intended to influence the agent's behavior during analysis.
- Ingestion points: The skill reads project documentation, README files, pricing tier copy, and codebase features to identify customer segments.
- Boundary markers: A mandatory confirmation step requires the user to approve a full draft before the
.agents/memory/icp.mdfile is written or updated. - Capability inventory: The skill is limited to reading project context and writing to a single specific markdown file path.
- Sanitization: The skill relies on manual user review of the generated draft to mitigate the impact of potentially malicious instructions in the source files.
- [SAFE]: The plugin metadata references the author's official site (
https://shipshit.dev) for documentation and support, which is a legitimate vendor resource consistent with the author's identity.
Audit Metadata