analyze-func-specs
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data (functional specifications and definitions). This represents an attack surface for indirect prompt injection if the processed text contains malicious instructions. However, the risk is minimal because the skill's instructions strictly constrain the agent's output to a predefined format ('COMPATIBLE' or 'CONFLICTING'), preventing the execution of arbitrary instructions.
- Ingestion points: The skill reads functional specs and definitions provided in the input context.
- Boundary markers: No specific delimiters or 'ignore' instructions are provided for the input data.
- Capability inventory: The skill calls 'load-plain-reference' to retrieve rules but does not perform file writes, network operations, or command execution.
- Sanitization: No explicit sanitization or validation of the input text is mentioned.
- [SAFE]: No evidence of credential theft, obfuscation, remote code execution, or unauthorized network activity was found. The workflow is focused on text analysis and follows standard instructional patterns.
Audit Metadata