plot-deliver
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
gitandgh(GitHub CLI) to manage repository state, check PR status, and commit delivery updates. It also calls a vendor-provided helper script (../plot/scripts/plot-impl-status.sh) to verify implementation status. - [PROMPT_INJECTION]: The skill ingests untrusted data from pull request descriptions and code diffs to evaluate whether project deliverables have been met (Step 5: Verify Plan Completeness). This creates an indirect prompt injection surface. The analysis identifies this as a standard operational surface for development tools, and the instructions mitigate risk by requiring human-in-the-loop confirmation before the final delivery action.
Audit Metadata