spec-driven-development
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a procedural guide for a software development lifecycle (SDLC) methodology. It does not contain any executable code, command-line instructions, or network-accessing tools.- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection as it is designed to process external requirements and design constraints.
- Ingestion points: User requirements capture (SKILL.md, Step 1) and design constraint resolution (SKILL.md, Step 2).
- Boundary markers: The skill employs a structured multi-stage workflow (S01-S05) which requires transforming raw requirements into binary acceptance criteria, acting as a functional boundary.
- Capability inventory: The skill describes a manual or agent-assisted workflow for implementation (Step 6) but does not include any automated file system writes or network operations.
- Sanitization: While no specific text filtering is mentioned, the methodology requires all requirements to be converted into 'concrete, observable behavior' (Step 3), which reduces the risk of the agent executing embedded instructions within the requirements text.
Audit Metadata