common-software-requirements
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill provides instructions and templates for drafting technical requirements. It does not contain any evidence of credential harvesting, unauthorized network operations, or persistence mechanisms.
- [EXTERNAL_DOWNLOADS]: The skill references industry standard documentation and guidelines from external sources including NASA, IBM, IEEE, and various technical blogs in
references/standards-baseline.md. These links are provided for informational reference to guide the agent's behavior and are not used for automated code execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided Product Requirement Documents (PRD) and Acceptance Criteria (AC) to generate SRS files.
- Ingestion points: The agent reads external PRD files and user-supplied requirement statements to populate templates.
- Boundary markers: None explicitly defined to separate untrusted PRD content from system instructions.
- Capability inventory: The skill has the capability to write generated specifications to the filesystem in
docs/srs/. - Sanitization: No specific sanitization or validation of input documentation is performed. This represents a standard ingestion surface typical of document generation skills.
Audit Metadata