writing-task-plans
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFENO_CODEPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is composed exclusively of Markdown documentation and templates. It does not include any executable scripts, shell commands, or automated configuration files.
- [PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection as it processes untrusted data from the local codebase.
- Ingestion points: The agent is instructed in
SKILL.mdto read existing code and project configuration files (Step 1: Research Before Writing). - Boundary markers: No specific delimiters or instructions to ignore embedded prompts in the analyzed code are provided.
- Capability inventory: The skill's primary capability is writing Markdown files to the
tasks/directory using the agent's file system tools. - Sanitization: No sanitization or filtering of the ingested code content is specified.
Audit Metadata