start-planning
Audited by Socket on Feb 22, 2026
1 alert found:
Anomaly[Skill Scanner] System prompt extraction attempt All findings: [HIGH] skill_discovery_abuse: System prompt extraction attempt (SD002) [AITech 4.3] [HIGH] skill_discovery_abuse: System prompt extraction attempt (SD002) [AITech 4.3] The fragment is internally consistent with its stated purpose of orchestrating a planning workflow for a technical-planning skill. It demonstrates proper phase gating, state-driven routing, and session state management. Potential risks include dependency on external shell scripts (discovery.sh, write-session-state.sh, system-check.sh) and dynamic path handling which could be misused if inputs are unsanitized. Overall, the footprint is coherent with planning tooling, but warrants review of script integrity and input sanitization to maintain supply-chain confidence. LLM verification: BENIGN: The skill fragment describes a disciplined, user-guided planning orchestration with explicit state routing and artifact generation. It intentionally avoids executable payloads or data exfiltration, focusing on planning artifacts and session management. While the workflow design is sound, monitor for prompt-based data exposure in surrounding tooling and ensure secure handling of session state artifacts.