task-planning
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses markdown templates to generate shell commands like
git commitandpytest. These commands are intended to be executed by the agent or a sub-skill to implement the feature described in the plan. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. 1. Ingestion points: External project specifications and design requirements from users or preceding workflow skills. 2. Boundary markers: Absent; user specifications are processed without explicit delimiters or warnings to ignore embedded instructions. 3. Capability inventory: Local file system writes to
docs/plans/and shell command execution using tools likegitandpytest. 4. Sanitization: Absent; input requirements are interpolated directly into generated plan templates without validation or escaping.
Audit Metadata