openspec-ff
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied descriptions and existing planning artifacts to generate technical designs and implementation tasks, creating a surface for indirect prompt injection.
- Ingestion points: The workflow reads data from
proposal.mdandspecs/**/*.mdto inform the creation ofdesign.mdandtasks.mdas described in SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or specific instructions to ignore potential commands embedded within the source artifacts.
- Capability inventory: The skill is authorized to perform file system write operations within the
openspec/changes/directory to create multiple markdown artifacts. - Sanitization: The provided skill instructions do not mention sanitization or validation of the input content before it is interpolated into the generation process.
Audit Metadata