implement-spec
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes specifications and tickets from an external issue tracker to define its tasks and implementation strategy. This external content serves as a control input for the agent.
- Ingestion points: Specification files and issue tracker data accessed in Step 1 of the implementation workflow.
- Boundary markers: The instructions lack delimiters or warnings to treat processed specification data as potentially untrusted content.
- Capability inventory: The agent performs git operations (branching, merging, worktrees) and invokes subagents that carry out implementation and testing tasks.
- Sanitization: There is no evidence of filtering or validation for instructions that might be embedded within the technical specifications.
- [DYNAMIC_EXECUTION]: The workflow relies on 'implementer subagents' to build tickets using the
tdd(Test-Driven Development) tool. This involves the runtime execution of code and tests generated from the specification content.
Audit Metadata