quarter-plan
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill reads local user files such as
user-profile.yamlandGrowth_Goals.mdto provide context for goal recommendations. This behavior is consistent with the skill's primary purpose of personal planning and assistant-based organization.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from user-controlled files like project directories and archive reviews. While this represents a data ingestion surface, the processing is limited to the local environment and intended for building a quarterly plan.\n- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: Relies on a standard MCP tool (create_quarterly_goal) to handle the file creation logic, which is the expected method for structured document generation within the agent platform.
Audit Metadata