specification-website
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches Markdown-formatted specification pages, checklists, and API catalogs from the author's official domain,
specification.website. These resources are the primary data sources intended to support site auditing and standards lookups. - [INDIRECT_PROMPT_INJECTION]: The skill processes external Markdown content retrieved at runtime, which constitutes an ingestion point for untrusted data.
- Ingestion points: Specification content and checklists fetched from
https://specification.website/spec/andllms-full.txt(SKILL.md). - Boundary markers: None specified in instructions to distinguish specification content from agent instructions.
- Capability inventory: The skill includes tools for full-text search, listing topics, fetching Markdown, and generating audit plans. It does not possess file-writing, shell execution, or sensitive data access capabilities.
- Sanitization: No specific sanitization or filtering is described for the retrieved external content.
Audit Metadata