spec-product
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use a custom command-line interface tool,
doctrine, to manage and validate product specification entities. - The agent is prompted to use commands such as
doctrine spec new,doctrine spec req add,doctrine spec show, anddoctrine spec validateto maintain structured data (TOML) and narrative content (Markdown) within the workspace. - [INDIRECT_PROMPT_INJECTION]: The skill processes external user-supplied data for product requirements, which presents a surface for indirect prompt injection.
- Ingestion points: The skill ingests untrusted text when performing tasks like "authoring, revising, normalising, or reviewing a doctrine product specification/PRD."
- Boundary markers: Absent. The instructions do not specify the use of delimiters or protective headers to isolate user-supplied requirement content from agent instructions.
- Capability inventory: The agent possesses the capability to read and write files on the local filesystem using the
doctrineCLI based on user-provided input. - Sanitization: Absent. There are no instructions to sanitize, escape, or validate the content of requirements before they are incorporated into the specification entities.
Audit Metadata