plan-rollout
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local scripts such as enumerate_envs.sh and probe_telemetry_tools.sh and utilizes standard developer tools including git, gh, aws, argocd, and vercel to inspect project structure and deployment configurations.
- [EXTERNAL_DOWNLOADS]: Recommends the installation of companion skills via npx skills add firetiger-oss/skills, which involves downloading packages from the author's repository.
- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface where untrusted data from git diff and PR URLs is ingested in SKILL.md and interpolated into a monitoring plan via monitoring-plan-template.md. While no explicit sanitization or boundary markers are present in the template rendering logic in render_plan_section.sh, this data processing is required for the skill's core functionality of planning for code changes. The capability inventory for this surface includes writing files to the .rollout/ directory and executing user-defined deploy detection commands.
Audit Metadata