plan-one-shot

Pass

Audited by Gen Agent Trust Hub on Feb 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): No malicious behaviors, obfuscation, or unauthorized data access patterns detected.
  • [COMMAND_EXECUTION] (SAFE): Command execution is explicitly gated behind a mandatory user review and a specific trigger phrase ('Execute Plan'), providing a robust safety control for autonomous actions.
  • [PROMPT_INJECTION] (SAFE): The skill ingests codebase data to generate implementation plans, which presents an indirect injection surface. 1. Ingestion points: Repository files. 2. Boundary markers: Absent. 3. Capability inventory: File modification and command execution. 4. Sanitization: Absent. This inherent risk is considered SAFE because the mandatory human review of all generated plan artifacts effectively mitigates the potential for malicious data to influence the agent's actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 18, 2026, 01:19 PM