spec-plan
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by ingesting data from external files.
- Ingestion points: Reads
specs/constitution.mdandspecs/{feature}/spec.md(via SKILL.md steps 1 and 2) to generate execution plans. - Boundary markers: There are no explicit instructions or delimiters used to ensure the agent ignores malicious instructions that might be contained within those specification files.
- Capability inventory: The skill performs file system write operations (SKILL.md steps 3 and 10) to create
plan.mdand updatespec.md. It does not utilize network access or shell execution tools. - Sanitization: The skill does not perform validation or escaping of the content read from the specification files before using it to generate the plan.
Audit Metadata