apex-plan
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's instructions are strictly focused on project management, cost estimation, and task distribution. There are no attempts to bypass safety filters, exfiltrate credentials, or maintain persistence.
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it processes external data from web searches and user-defined project scopes.
- Ingestion points: User project requests and content retrieved from the
WebFetchandWebSearchtools. - Boundary markers: No explicit boundary markers or instruction-protection tags are used when interpolating external data into the prompt.
- Capability inventory: The skill has access to powerful tools including
Bash,Write,Edit, and network-enabled tools (WebFetch,WebSearch). - Sanitization: There is no evidence of sanitization or filtering of external content before it is processed by the agent.
Audit Metadata