skills/agentivestack/skills/spec/Gen Agent Trust Hub

spec

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests local codebase and documentation content as context, which creates an attack surface for indirect prompt injection.
  • Ingestion points: The skill discovers project context by reading docs/CONTEXT_MAP.md, docs/UBIQUITOUS_LANGUAGE.md, docs/contexts/*/CONTEXT.md, CLAUDE.md, and exploring relevant areas of the codebase.
  • Boundary markers: There are no explicit delimiters or instructions provided to the agent to prevent it from following commands that might be embedded within the read documentation.
  • Capability inventory: The skill performs file read and write operations, specifically creating new specification files in docs/contexts/<primary-context>/specs/.
  • Sanitization: The skill does not implement sanitization or validation of the content retrieved from the local project files before processing it.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 02:43 PM
Security Audit — agent-trust-hub — spec