to-tasks
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill coordinates the processing of external input data that could contain malicious instructions designed to influence agent behavior.
- Ingestion points: The skill ingests changesets and architectural directions during the decomposition phase (SKILL.md).
- Boundary markers: There are no explicit delimiters or specific instructions to isolate untrusted data from the agent's operating context.
- Capability inventory: The skill utilizes capabilities for task derivation, tracker synchronization, and code generation through the /split-tasks, /track-tasks, and /forge tools (SKILL.md).
- Sanitization: No mechanisms for filtering or validating external input content are described.
Audit Metadata