spec-loop-write-glossary
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to read and apply project-specific instructions from files such as
AGENTS.mdand existingglossary.adoccontent. This creates a vulnerability where an attacker could embed malicious instructions in those files to influence the agent's behavior when it generates or updates the documentation. - Ingestion points: The agent is instructed to read
AGENTS.mdandglossary.adocinSKILL.mdandglossary-format.md. - Boundary markers: The instructions do not specify any delimiters or warnings to ignore potentially malicious embedded content within the ingested files.
- Capability inventory: The skill is authorized to perform file-write operations to update the project's
glossary.adocfile. - Sanitization: There are no requirements for sanitizing, validating, or escaping the content retrieved from external files before it is processed or written back to the repository.
Audit Metadata