doc-iplan-fixer

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to perform file management tasks such as moving and renaming documents; specifically, Phase 0 involves moving IPLAN files to docs/08_IPLAN/ and renaming them to match standard IDs.
  • [PROMPT_INJECTION]: The skill incorporates a surface for indirect prompt injection by processing external audit reports to drive file modifications.
  • Ingestion points: IPLAN-NN.A_audit_report_vNNN.md (audit report) and existing IPLAN YAML files.
  • Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore malicious instructions potentially embedded in the reports.
  • Capability inventory: The skill utilizes the agent's ability to read, write, move, and rename files within the documentation directory.
  • Sanitization: No explicit content sanitization steps are defined for the ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 07:36 AM
Security Audit — agent-trust-hub — doc-iplan-fixer