implement-spec
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted data in the form of specifications and tickets to guide automated code implementation and repository management.
- Ingestion points: The skill reads external specifications and task tickets (Step 1) to build a task graph for sub-agents.
- Boundary markers: Absent. The instructions do not provide delimiters or safety warnings to ignore instructions embedded within the processed specs or tickets.
- Capability inventory: The skill possesses significant capabilities including Git branch management, worktree creation, merging, executing specialized tools (
tdd,code-review), and writing files to directories outside the project repository. - Sanitization: Absent. There is no mechanism described for validating or sanitizing the content of tickets before they are interpreted as instructions by implementation agents.
Audit Metadata