life-planning
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external local files such as
.claude/memories/about-taylor.mdand project briefs inideas/ideas/[project]/. This creates an ingestion surface for potentially untrusted content if those files are modified by external sources. - Ingestion points: Reads from
.claude/memories/,my-vault/, andideas/directories. - Boundary markers: None specified in the instructions to delimit external content.
- Capability inventory: No command execution, file-write, or network operations are defined within this skill file.
- Sanitization: No explicit sanitization or validation of the ingested content is mentioned.
- [SAFE]: The skill's primary purpose is organizational planning. It uses local file paths and standard workflows without invoking dangerous commands, making network requests, or using obfuscation techniques.
Audit Metadata