spec-forge-architecture
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on
spec-forge-clito perform operations such as resolving UX contracts, applying configuration changes, merging YAML artifacts, and managing stage gates. These commands are integral to the 'Spec Forge' workflow and are used to manage project specifications in the.spec-forgedirectory. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection because it ingests data from external YAML files.
- Ingestion points: The skill reads
request-context.yamlandrole-map.yamlfrom theframingdirectory of a specific project. - Boundary markers: No explicit XML tags or delimiters are used to wrap the content of these files when they are processed by the agent.
- Capability inventory: The skill has the capability to write and merge files via
spec-forge-cli artifact mergeandspec-forge-cli apply. - Sanitization: There is no evidence of input validation or sanitization performed on the content of the YAML artifacts before they are used to influence the agent's responses or summarized for the user.
Audit Metadata