specify-behavior
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to manage internal project metadata using the
mvcommand for directories within the.skills/folder. - [INDIRECT_PROMPT_INJECTION]: The skill processes external information such as frame-change outcomes and roadmap indexes to generate requirements, which creates a potential surface for indirect prompt injection. 1. Ingestion points: Information is ingested from approved frame-change outcomes and
docs/roadmap/INDEX.md. 2. Boundary markers: The skill uses markdown headers and a predefined requirements template to structure content. 3. Capability inventory: The agent has the capability to write to the file system and perform basic directory operations. 4. Sanitization: The process includes several mandatory self-review scans (ambiguity, testability, and placeholder checks) and requires an explicit user approval gate before a requirement document is finalized. - [SAFE]: The skill operates entirely within the local project environment using established paths and templates. No remote code execution, unauthorized network access, or credential exposure were identified.
Audit Metadata