tech-spec
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection by instructing the agent to ingest and analyze data from the local codebase and documentation to generate specifications.\n
- Ingestion points: In the 'Load standards and local context' section, the skill directs the agent to 'Inspect existing code and docs for local vocabulary, module layout, domain concepts, errors, adapters, observability, runtime patterns, and test style.'\n
- Boundary markers: There are no explicit instructions for the agent to use boundary markers or to ignore potential instructions embedded within the analyzed project files.\n
- Capability inventory: The skill utilizes the agent's ability to read from the filesystem to perform analysis and the ability to write files to save the generated specification when requested by the user.\n
- Sanitization: The skill does not define methods for sanitizing or escaping the content retrieved from the project context before processing it as part of the technical specification workflow.
Audit Metadata