writing-plans

Pass

Audited by Gen Agent Trust Hub on Mar 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious code or security threats were identified. The skill acts as a structured template generator for engineering documentation.\n- [PROMPT_INJECTION]: The skill exhibits an inherent surface for Indirect Prompt Injection (Category 8) because it processes external specifications and context files to generate plans. This is a characteristic of planning agents rather than a malicious defect.\n
  • Ingestion points: Input specifications provided via the --spec parameter and project context files provided via --context-files.\n
  • Boundary markers: No explicit delimiters or instructions are used to separate untrusted specification data from the system instructions.\n
  • Capability inventory: The skill writes generated plans to the docs/plans/ directory and generates instructions intended for downstream execution agents (superpowers:subagent-driven-development, superpowers:executing-plans).\n
  • Sanitization: The skill does not perform sanitization or validation on the content of the provided specifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 14, 2026, 11:17 AM