planning-with-files-es — security audits
Review recommended
Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.
Gen Agent Trust Hub
warnThis skill is a project planning system that persists state in Markdown files and provides session recovery by reading local conversation history. While functionally robust, it accesses sensitive conversation logs and uses shell hooks to dynamically search for and execute lifecycle scripts from a shared plugin cache, which could potentially be abused if other malicious files are present in the environment.
Socket
passNo alerts
May 22, 2026Full reportSnyk
passRisk: LOW · No issues
ZeroLeaks
passScore: 93/100 · 2 sections analyzed