skills/davidlee/doctrine/spec-product/Gen Agent Trust Hub

spec-product

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use a custom command-line interface tool, doctrine, to manage and validate product specification entities.
  • The agent is prompted to use commands such as doctrine spec new, doctrine spec req add, doctrine spec show, and doctrine spec validate to maintain structured data (TOML) and narrative content (Markdown) within the workspace.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external user-supplied data for product requirements, which presents a surface for indirect prompt injection.
  • Ingestion points: The skill ingests untrusted text when performing tasks like "authoring, revising, normalising, or reviewing a doctrine product specification/PRD."
  • Boundary markers: Absent. The instructions do not specify the use of delimiters or protective headers to isolate user-supplied requirement content from agent instructions.
  • Capability inventory: The agent possesses the capability to read and write files on the local filesystem using the doctrine CLI based on user-provided input.
  • Sanitization: Absent. There are no instructions to sanitize, escape, or validate the content of requirements before they are incorporated into the specification entities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 11:04 AM