immutable-spec
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a structured and transparent process for software development that prioritizes traceability and integrity through an append-only specification model.
- [COMMAND_EXECUTION]: The agent is instructed to run standard development tools, such as build systems and test runners (e.g., cargo, pnpm, ansible), to verify acceptance criteria. These operations are performed locally within the context of the project's technology stack and are a legitimate part of the described delivery workflow.
- [DATA_EXPOSURE]: The skill operates on local project files within a defined directory structure (docs/specs/). It does not attempt to access sensitive user data, credentials, or environment variables.
- [PROMPT_INJECTION]: The instructions focus on workflow management and technical documentation. They do not contain attempts to bypass AI safety guardrails or override the agent's core behavioral constraints.
Audit Metadata