feature-plan

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements a standard workflow for generating documentation. It uses a predefined local template and does not perform any network operations or access sensitive credentials.
  • [PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it gathers inputs from the conversation context to populate the feature plan.
  • Ingestion points: Inputs gathered from conversation context as described in Step 1 of the Workflow in SKILL.md.
  • Boundary markers: None explicitly defined for the gathered input.
  • Capability inventory: File system write access to the docs/plans/ directory as described in Step 5 of the Workflow in SKILL.md.
  • Sanitization: The skill includes a manual safeguard by requiring the agent to confirm the output path with the user before writing the file.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 05:43 PM
Security Audit — agent-trust-hub — feature-plan