plan-for-mega-goal
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The AZ Skill Feedback section provides a shell command
npx --yes hivenet@latestwhich downloads and executes code from a remote registry at runtime. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing external tools
ghandghstackwhich are required for the autonomous workflow. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user input via
$ARGUMENTSto generate sub-goal and roadmap files that are subsequently used as authoritative instructions in an autonomous loop. - Ingestion points: User-provided objectives and context passed through
$ARGUMENTS. - Boundary markers: The generated files use standard Markdown formatting but lack explicit markers or instructions to ignore potential nested commands in the user content.
- Capability inventory: The autonomous loop (driven by the generated files) has the capability to write files, manage GitHub PRs via
gh, and execute stack operations viaghstack. - Sanitization: There is no evidence of validation or escaping for user-supplied data before it is written into instruction files.
- [COMMAND_EXECUTION]: The skill utilizes system commands like
which,wc,cat, andpbcopyto manage the planning environment and validate prompt lengths.
Audit Metadata