brainstorming

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill is a procedural guide that establishes a 'hard gate' for software development workflows. It mandates a design-first approach, requiring user approval of architectural plans before executing any code-related tasks.
  • [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading external data from the project environment, which presents a standard surface for indirect prompt injection.
  • Ingestion points: The skill instructions direct the agent to 'explore project context' by checking local files, documentation, and recent commit records.
  • Boundary markers: There are no defined delimiters or specific instructions to isolate content read from files from the agent's internal logic.
  • Capability inventory: The skill has the capability to write markdown files to the local filesystem (under docs/plans/) and invoke downstream implementation skills.
  • Sanitization: The skill does not include steps to sanitize or validate the content retrieved from the project context before incorporating it into the design process.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 10:03 AM