plan
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill runs local shell commands including
ls,grep, andglobto perform codebase research and identify relevant implementation patterns. - [EXTERNAL_DOWNLOADS]: It utilizes integrated platform agents such as
@official-docs-research-agentand@best-practices-research-agentto gather information from external documentation and best practice repositories. - [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection as it processes external content from user arguments and project files. However, this is consistent with its primary purpose as a planning tool.
- Ingestion points: Processes
$ARGUMENTSand local markdown files from thedocs/brainstorm/directory. - Boundary markers: User-provided feature descriptions are encapsulated within
<feature_description>tags. - Capability inventory: Accesses the local file system via standard discovery commands and can trigger downstream workflows using commands like
/buildand/create-branch. - Sanitization: The skill does not perform explicit sanitization of ingested content before it is incorporated into the planning process.
Audit Metadata