executing-plans

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill design adheres to safety principles by requiring manual confirmation before starting implementations and restricting actions on sensitive branches (main/master) without explicit user consent.
  • [PROMPT_INJECTION]: The skill processes implementation plans from external files, creating an indirect prompt injection surface. This is effectively mitigated by mandatory 'critical review' instructions (Step 1.1, 1.2) and a requirement to raise concerns to a human partner (Step 1.3) before execution.
  • [COMMAND_EXECUTION]: While the skill executes steps from a plan, it includes defensive instructions to stop execution immediately upon encountering blockers, dependency issues, or validation failures (Step 2 and 'When to stop' section), preventing uncontrolled command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 07:12 AM
Security Audit — agent-trust-hub — executing-plans