plugin-improve
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill implements a research detection mechanism (Phase 0.45) that automatically extracts findings from the conversation history to influence subsequent implementation phases.
- Ingestion points: Conversation history is scanned to identify and extract data from previous deep-research sessions in file SKILL.md.
- Boundary markers: The provided instructions do not specify any delimiters or safety markers to isolate extracted content from the skill's own instructions.
- Capability inventory: The skill is granted
Write,Edit, andBashpermissions, allowing it to modify source files and execute system commands in Phase 3 and Phase 6. - Sanitization: There are no evident sanitization or verification steps for the data retrieved from the chat history before it is used to guide file modifications.
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to perform standard developer workflow operations. - Backup management: Uses
rsyncto create file backups and executes a local script./scripts/verify-backup.shto ensure integrity. - Git operations: Employs git commands such as
git log,git add, andgit tagfor version control management. - File filtering: Uses
grepto verify plugin status in thePLUGINS.mdfile.
Audit Metadata