task-master
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the workspace and uses it to drive agent actions.
- Ingestion points: The skill reads roadmaps, specifications, decisions, issues, plans, code, and tests from the repository (SKILL.md, workflow step 2).
- Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious instructions embedded in these project files.
- Capability inventory: The skill can write files to the .agents/roadmap/ directory and invokes external tools/skills such as kickoff and forest for implementation and worktree management (references/integrations.md).
- Sanitization: There is no evidence of sanitization, validation, or filtering of the content read from external files before it is processed or used in coordination tasks.
Audit Metadata