create-task-batch
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a legitimate task management workflow for requirements gathering and task decomposition using standard tools.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it processes untrusted user-supplied data into structured task lists and PRDs.
- Ingestion points: User-provided feature descriptions in Phase 2 and acceptance criteria in Phase 5.
- Boundary markers: Absent; the output templates do not use explicit delimiters or instructions to ignore embedded commands in the user's input.
- Capability inventory: The skill utilizes
Read,Write,Glob, andGreptools to manage plan files and action reports. - Sanitization: No explicit sanitization or validation of user-provided text is defined before interpolation into output files.
Audit Metadata