plan
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted source code during its analysis phase, which creates a surface for indirect prompt injection.
- Ingestion points: The workflow in
SKILL.mdinstructs the agent to "scan relevant source files to understand current state" as the first step of its process. - Boundary markers: There are no specified delimiters or instructions to the agent to disregard embedded directives within the files it reads.
- Capability inventory: The skill uses
Read,Grep, andGlobtools to ingest data and is instructed to generate a new markdown plan file based on its findings. - Sanitization: No sanitization or validation logic is defined to handle potentially malicious instructions embedded in the analyzed project files.
Audit Metadata