mission-plan
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes content from
spec.mdandclarifydecision files, which are potentially untrusted inputs. - Ingestion points: Reads from
spec.mdandclarifydata during the plan generation phase. - Boundary markers: No specific delimiters or "ignore instructions" warnings are defined for processing these files.
- Capability inventory: The skill executes
adlc-clifor workflow management and runs local shell scripts (run-branch.sh,open-mr.sh) for branch and merge request operations. - Sanitization: There is no evidence of sanitization or validation of the content read from input files before it influences agent actions.
- [COMMAND_EXECUTION]: The skill's primary function involves executing shell commands and scripts to manage automation workflows.
- Evidence: Instructions include running
adlc-cli workflow state show,adlc-cli workflow resume, and executing local scripts likerun-branch.shandopen-mr.sh. - [EXTERNAL_DOWNLOADS]: The skill references a dependency hosted in an external repository.
- Evidence: Recommends installation from
tikalk/adlc-team-skillsviaadlc-cli skills add.
Audit Metadata