deepagents-planning-todos
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for agents to process external data, which creates a surface for indirect prompt injection.\n
- Ingestion points: The agent implementation in
assets/examples/todo-driven-agent/agent.pyprocesses user messages and simulated documentation. Patterns inreferences/todo-patterns.mdingest data from web searches (via Tavily) and PDF files.\n - Boundary markers: The example system prompts do not define explicit boundary markers or instructions to ignore instructions embedded in retrieve content.\n
- Capability inventory: The skill demonstrates agents with capabilities including filesystem access, network operations, and task delegation to subagents.\n
- Sanitization: The provided examples do not include mechanisms for sanitizing or filtering instructions that might be embedded in the data retrieved from search results or documents.\n- [COMMAND_EXECUTION]: The skill includes executable Python scripts intended for local execution by the user.\n
scripts/visualize_todos.pyis a utility script that parses local JSON trace files to generate visualizations.\nassets/examples/todo-driven-agent/agent.pyis a demonstration script that runs a local agent loop.\n- [EXTERNAL_DOWNLOADS]: The documentation and setup instructions inSKILL.mdandassets/examples/todo-driven-agent/README.mdguide the user to install dependencies from public registries using package managers likeuv.
Audit Metadata