challenging-change-specs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data from a wide variety of project files to verify consistency across the development lifecycle.
- Ingestion points: The skill reads project rules, requirements (e.g.,
spec.md,requirements.md,proposal.md), design documents, task lists, and actual project source code as defined inSKILL.mdandreferences/framework-map.md. - Boundary markers: The instructions do not specify the use of clear delimiters (like XML tags or triple quotes) or "ignore embedded instructions" warnings when the agent processes the content of these external files.
- Capability inventory: The skill is intended to perform read operations across the local file system and codebase to compare documentation against implementation.
- Sanitization: The instructions lack specific guidance on sanitizing or validating the content of ingested documentation before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill includes references to various official repositories and documentation sites for software development frameworks.
- Evidence:
references/framework-map.mdcontains links to official resources includinggithub.com/github/spec-kit,kiro.dev,github.com/Fission-AI/OpenSpec,github.com/bmad-code-org/BMAD-METHOD, andcucumber.io. - Context: These links are provided for framework identification and reference purposes. They target official project domains and well-known service repositories.
Audit Metadata