dev-planning
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external design documents and developer-provided technical preferences, which are processed without explicit boundary markers or sanitization, creating a potential surface for indirect prompt injection.
-
- Ingestion points:
SKILL.md(Processing design documents and developer input).
- Ingestion points:
-
- Boundary markers: Absent.
-
- Capability inventory: Writing documentation, creating project files, environment initialization, and dependency installation.
-
- Sanitization: Absent.
- [COMMAND_EXECUTION]: The skill automates project initialization and dependency installation based on the confirmed technical scheme, which is a core functional requirement of its stated purpose.
- [SAFE]: The skill follows secure secret management practices by instructing the agent to create
.env.examplefiles and explicitly warning that sensitive values must not be submitted to the repository.
Audit Metadata