implement-plan
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes implementation plans and referenced files which serves as an ingestion point for potentially untrusted data.\n
- Ingestion points: The skill resolves and reads plan files from
.turbo/plans/and further reads all files listed in the plan's 'Context Files', 'Pattern Survey', and 'Implementation Steps' sections (SKILL.md, Step 1 and Step 2).\n - Boundary markers: There are no explicit instructions to use delimiters or to ignore potential instructions embedded within the files being read.\n
- Capability inventory: The skill possesses the capability to read and write files within the workspace, manage agent goals (via
create_goalandupdate_goal), and invoke the$implementskill to carry out the described tasks.\n - Sanitization: No sanitization, escaping, or filtering of the content retrieved from these external files is performed before it is used to influence the agent's next steps.
Audit Metadata