td-build-planning
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The planning process involves ingesting existing network topology and operator metadata, which serves as a potential vector for indirect instructions.
- Ingestion points: Operator lists, connection graphs, and specific operator info retrieved from the TouchDesigner network (referenced in the 'Scout' section of SKILL.md).
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded strings within the operator names or parameters it processes.
- Capability inventory: The skill leverages the
build_networktool to execute the resulting plan, which includes creating nodes, wiring connections, and setting parameter expressions. - Sanitization: There is no mention of filtering or sanitizing strings retrieved from the environment before they are used in the planning logic.
Audit Metadata