implement-spec
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a process-oriented workflow for software development tasks using subagents. It utilizes standard git actions such as branching, worktrees, and PR management to coordinate implementation work.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external software specifications and task tickets, which represent an untrusted data surface.\n
- Ingestion points: Specification documents and ticket task graphs referenced in SKILL.md.\n
- Boundary markers: None defined in the skill instructions.\n
- Capability inventory: The agent has capabilities for git branch management, worktree creation, and writing markdown notes to the local file system.\n
- Sanitization: No explicit sanitization or validation of the input specifications is described.
Audit Metadata