to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the repository and conversation context and uses it to generate content published to a project issue tracker.
- Ingestion points: The skill reads conversation context and performs repository exploration to synthesize codebase understanding into a specification (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or "ignore embedded instructions" warnings for the external content being processed.
- Capability inventory: The skill utilizes the capability to publish synthesized content to an external project issue tracker.
- Sanitization: There are no instructions for sanitizing or validating the ingested data before it is formatted into the specification and published.
Audit Metadata