implement-plan

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [NO_CODE]: The skill consists exclusively of markdown instructions defining a development process. It does not contain scripts, configuration files, or executable payloads.- [INDIRECT_PROMPT_INJECTION]: The workflow involves processing external data (a "plan" containing Acceptance Criteria and Verification Plans). While this presents a surface where malicious instructions could be embedded in the input data, the skill's requirement for a specific mapping between criteria, oracles, and test cycles provides a structured framework that mitigates the risk of unintended behavior by enforcing rigorous verification steps.- [SAFE]: The instructions promote best practices such as separate commits for refactors and baseline testing. There are no patterns suggesting data exfiltration, obfuscation, or privilege escalation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:14 AM