to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from the conversation history and repository files to generate specifications.
- Ingestion points: Conversation context and repository exploration (SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or warnings to ignore malicious instructions embedded in the synthesized content.
- Capability inventory: The agent is instructed to publish the generated content to a project issue tracker, representing a write capability to an external system (SKILL.md).
- Sanitization: There is no evidence of sanitization, validation, or escaping of the ingested content before it is published.
Audit Metadata