spec-kit-checklist
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided or project-specific documentation files (
spec.md,plan.md,tasks.md) to generate requirement quality checklists. If these files contain malicious instructions, they could influence the agent's analysis or the output generated in the checklist files. - Ingestion points: Files located in
specs/changes/<name>/and the project'sFRAMEWORK.mdfile. - Boundary markers: None identified. The skill does not explicitly instruct the agent to ignore instructions embedded within the loaded artifacts.
- Capability inventory: The skill has the capability to read local project files and write new markdown files to the
specs/changes/<name>/checklists/directory. - Sanitization: There are no explicit sanitization or validation steps described for the content loaded from the external artifacts.
Audit Metadata