clarify
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates entirely on local project files and user input to refine documentation. It does not perform any network operations or external data transmissions.
- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were detected. The logic is transparent and focused on the stated task of specification clarification.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external content from a feature specification file and user arguments, creating a surface for potential indirect prompt injection.
- Ingestion points: Reads the
FEATURE_SPECfile and accepts$ARGUMENTSfrom the user. - Boundary markers: Instructions use markdown formatting to separate process instructions from the data being analyzed.
- Capability inventory: The skill reads from and writes to the local
FEATURE_SPECfile; no dangerous system-level capabilities are invoked. - Sanitization: The instructions include guidance for the agent to correctly escape single quotes in user arguments, which helps prevent command injection if the data is used in shell contexts.
Audit Metadata