to-spec
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the gh CLI to create issues in GitHub repositories when requested by the user.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the codebase and conversation context which could contain malicious instructions.
- Ingestion points: The skill reads the current conversation context and codebase files to synthesize a specification (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions for the agent to ignore embedded commands within the ingested content.
- Capability inventory: The skill has capabilities to write to the local filesystem (docs/ directory), execute commands via the gh CLI, and perform actions via the Atlassian MCP (Jira).
- Sanitization: No sanitization or filtering is applied to the ingested content before it is processed by the agent.
Audit Metadata