bento-spec
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and follow instructions from repository-level files such as
AGENTS.md,CLAUDE.md, and.agents/bento/bento-spec.md. These files are external to the skill and could potentially be modified by an attacker to include malicious instructions that influence the agent's behavior. - Ingestion points: Repository files (
AGENTS.md,CLAUDE.md,.agents/bento/bento-spec.md) and the../bento-learn/reference path. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within these external files.
- Capability inventory: The skill has the capability to write specifications to files and invoke other development tools such as
bento-prototype,bento-qa, andbento-multi-phase-plan. - Sanitization: No explicit sanitization or validation of the content read from the repository files is mentioned in the skill instructions.
Audit Metadata