concise-planning
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is composed of static instructions and a markdown template. No scripts, binaries, or external dependencies are present within the skill definition.
- [SAFE]: Analysis of attack surface for potential indirect prompt injection (Category 8):
- Ingestion points: The workflow in
SKILL.mdinstructs the agent to scan external project files such asREADME.md, documentation, and source code. - Boundary markers: Absent; the skill does not define specific delimiters to isolate untrusted data within its template.
- Capability inventory: None; the skill's functionality is strictly limited to text generation for planning purposes and does not involve subprocess calls, file writes, or network requests.
- Sanitization: Absent; the skill does not specify any validation or escaping for the content read from external files.
Audit Metadata