spec-loop-clarify-task
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no malicious patterns or security vulnerabilities. It is purely instructional content for managing a clarification workflow.
- [PROMPT_INJECTION]: The instructions do not contain attempts to bypass model safety filters, override system prompts, or use jailbreak-style language. The use of terms like 'important' or 'mandatory' is restricted to task-specific decision logic.
- [DATA_EXFILTRATION]: No network operations (curl, wget, fetch) or access to sensitive credentials/paths (e.g., .ssh, .aws, .env) are present. The skill only references relative project paths for other skill files and local documentation.
- [REMOTE_CODE_EXECUTION]: The skill does not perform external downloads or package installations. It explicitly states that 'Executable changes are not allowed'.
- [OBFUSCATION]: No Base64 encoding, zero-width characters, homoglyphs, or other obfuscation techniques were identified.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests data from local project files (code, docs, and tasks), it lacks dangerous capabilities like arbitrary command execution or network access, presenting a minimal attack surface.
Audit Metadata