team-plan
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to manage the project environment. Evidence includes the use of
echoto modify the.gitignorefile andgitcommands (add,commit) to stage and record changes to the local repository. These operations are performed automatically as part of the plan generation workflow.- [DATA_EXFILTRATION]: The skill performs network operations viagit pushto upload the generated implementation plan and modified project files to a remote repository. This constitutes a data transit point where local workspace content is sent to an external server, which is the intended behavior for team collaboration.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. * Ingestion points: Processes user-provided "spec or requirements" as described in the skill header. * Boundary markers: None present; the skill does not use delimiters to isolate the untrusted input from its own instructions. * Capability inventory: Performs file writes,git commit, andgit push(documented in SKILL.md). * Sanitization: None present; the skill does not validate or filter the content of the input spec before using it to generate the plan that is subsequently committed and pushed.
Audit Metadata