spec
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests local codebase and documentation content as context, which creates an attack surface for indirect prompt injection.
- Ingestion points: The skill discovers project context by reading
docs/CONTEXT_MAP.md,docs/UBIQUITOUS_LANGUAGE.md,docs/contexts/*/CONTEXT.md,CLAUDE.md, and exploring relevant areas of the codebase. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to prevent it from following commands that might be embedded within the read documentation.
- Capability inventory: The skill performs file read and write operations, specifically creating new specification files in
docs/contexts/<primary-context>/specs/. - Sanitization: The skill does not implement sanitization or validation of the content retrieved from the local project files before processing it.
Audit Metadata