docs-planner
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions intended to manipulate the agent's output or prioritization logic.
- Ingestion points: GitHub issues from the 'strands-agents/harness-sdk' repository, community questions, support threads, and competitive context provided as inputs (documented in SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the ingested data.
- Capability inventory: The skill reads local filesystem content (site/src/...) and performs network reads via the GitHub CLI (documented in SKILL.md).
- Sanitization: No sanitization or filtering mechanisms are specified for the external content prior to analysis.
- [COMMAND_EXECUTION]: The skill instructs the agent to use the GitHub CLI ('gh') to pull documentation issues from a remote repository. This is a standard operation for the skill's purpose using a well-known service tool.
Audit Metadata