fern-spec
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and tune OpenAPI/AsyncAPI specification files, which serve as an untrusted data ingestion surface.
- Ingestion points: The skill ingests OpenAPI and AsyncAPI specification files referenced in
fern/generators.ymland throughout theSKILL.mdworking rules. - Boundary markers: The instructions do not define specific delimiters or warnings for the agent to ignore potentially malicious instructions embedded in the natural language fields of the specifications, such as
description,summary, orexamplevalues. - Capability inventory: The skill utilizes the
fernCLI tool, which provides capabilities for network operations (fern api update), file writes (fern write-overrides,fern write-definition), and local project initialization (fern init). - Sanitization: There is no evidence of sanitization or filtering for external content within the specification files being processed, allowing for potential manipulation of the agent's behavior during the editing or generation workflow.
Audit Metadata