to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from the repository and conversation context, which could potentially contain malicious instructions intended to influence the agent's output.
- Ingestion points: The skill reads the current conversation context and performs repository exploration to understand the codebase state.
- Boundary markers: The skill uses a markdown template for its output but does not implement delimiters or 'ignore' instructions for the data it ingests from the codebase.
- Capability inventory: The skill has the capability to read files from the repository and publish content to an external project issue tracker.
- Sanitization: There is no evidence of sanitization or validation of the content extracted from the codebase or conversation before it is synthesized into the final published specification.
Audit Metadata