planning-with-files

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a Stop hook in its YAML frontmatter to automatically execute a completion check script (check-complete.sh or check-complete.ps1) when a task session ends to ensure all planned phases are marked finished.\n- [COMMAND_EXECUTION]: Includes an initialization script (init-session.sh) to bootstrap required planning, findings, and progress tracking files in the user's project directory.\n- [COMMAND_EXECUTION]: Instructs the agent to execute a local Python script (session-catchup.py) for session recovery, which is a standard pattern for maintaining state in complex agentic workflows.\n- [COMMAND_EXECUTION]: Employs PowerShell with -ExecutionPolicy Bypass within its verification hooks to facilitate automated script execution across Windows environments.\n- [DATA_EXPOSURE]: Implements a PreToolUse hook that automatically reads the first 30 lines of the local task_plan.md file before executing file or shell operations to keep primary goals within the agent's immediate attention window.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 06:35 AM