sparc-methodology
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a
researchermode designed to perform deep information gathering using WebSearch and WebFetch tools, which ingests untrusted content from the internet into the agent's context. - Ingestion points: External websites, industry reports, and academic papers fetched via the
researchermode (SKILL.md). - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the fetched content.
- Capability inventory: The skill has access to file system modifications (
codermode), system design orchestration, and command-line execution. - Sanitization: There are no documented mechanisms for sanitizing or filtering instructions from external web data.
- [EXTERNAL_DOWNLOADS]: The documentation provides multiple activation methods using
npx claude-flowandnpx claude-flow@alpha, which downloads and executes code from the NPM registry at runtime. It also references external resources hosted ongithub.com/ruvnet/claude-flow. - [COMMAND_EXECUTION]: The skill instructions heavily rely on shell execution via the
npxCLI and local script execution (./claude-flow) to perform development tasks, which grants the agent the ability to run external binaries.
Audit Metadata