skills/lmcjt37/skills/dev-plan/Gen Agent Trust Hub

dev-plan

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes git rev-parse --show-toplevel and git rev-parse --abbrev-ref HEAD to identify the project root and current branch. These are standard, safe commands used to ensure that files are created in the appropriate project-specific directories.
  • [SAFE]: The skill possesses a surface for indirect prompt injection as it ingests ticket data (description, acceptance criteria) from Atlassian MCP. However, the risk is mitigated by a mandatory human-in-the-loop checkpoint where the agent must 'ask for permission to proceed' before writing any proposed planning steps to the filesystem. Additionally, it implements basic sanitization for branch-related strings.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 04:35 PM