spec-constellation-to-prompt-suite
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill is purely instructional and structural, focusing on documentation and the coordination of development tracks. It contains no executable code, remote dependencies, or exfiltration patterns.
- [PROMPT_INJECTION]: The skill defines a transformation process from external specification files into implementation prompts. This creates a surface for indirect prompt injection where instructions within specifications could influence downstream agent behavior. This risk is inherent to the use-case and is mitigated by the skill's methodology for cross-validation and integration contracts.
- Ingestion points: Specification files provided via the
spec_filesinput array. - Boundary markers: None explicitly defined in the provided workflow templates.
- Capability inventory: The skill produces text-based prompts meant for consumption by other autonomous implementation agents.
- Sanitization: Relies on structural cross-validation and manual review steps defined in the workflow.
Audit Metadata