specs-kit-task-implementation
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands for repository state verification and quality control, such as
git status --porcelainto verify the repository state andgrepfor finding temporary code artifacts during the cleanup phase.\n- [DYNAMIC_EXECUTION]: The workflow involves the automatic discovery and execution of build, lint, and test scripts defined in local project configuration files likepackage.json,Makefile,pom.xml,build.gradle,pyproject.toml, andcomposer.json.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests implementation instructions from external Markdown files, creating a vector for indirect prompt injection.\n - Ingestion points: Reads task definitions (e.g.,
docs/specs/.../TASK-XXX.md) and review reports to guide implementation logic.\n - Boundary markers: The skill does not employ explicit delimiters or warnings to separate its core instructions from the content of the ingested files.\n
- Capability inventory: The agent has permissions to create/modify files and execute arbitrary shell commands.\n
- Sanitization: There is no evidence of validation or sanitization for the content read from the task files before processing.
Audit Metadata