decomposition-planning-roadmap
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external codebase data, component inventories, and dependency maps to generate roadmaps and architecture stories. This represents an indirect prompt injection surface where malicious instructions embedded in the analyzed codebase could influence the agent's behavior.
- Ingestion points: Codebase analysis, component inventory documents, and dependency maps provided by other tools or the user (referenced in
SKILL.md). - Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious embedded commands in the source data.
- Capability inventory: The skill's primary capabilities involve generating structured text and markdown files, which typically involves file-write operations in agent environments.
- Sanitization: There are no specified mechanisms for sanitizing or validating the input data before processing.
Audit Metadata