to-spec
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
ghCLI to interact with GitHub repository features. It executes commands to create issues, create labels, and modify issue labels (gh issue create,gh label create,gh issue edit). These are standard operations for a development-focused agent. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection as it ingests content from external repository files to generate its output.
- Ingestion points: Reads
GLOSSARY.md,GLOSSARY-MAP.md, and Architecture Decision Records (ADRs) found in thedocs/adr/orsrc/*/docs/adr/directories (SKILL.md). - Boundary markers: There are no explicit delimiters or specific instructions provided to the agent to distinguish between the contents of these files and the core instructions.
- Capability inventory: The skill can create and edit issues on the GitHub repository using the
ghCLI. - Sanitization: No specific sanitization, filtering, or validation of the ingested documentation content is performed before the model synthesizes it into a specification.
Audit Metadata