spec-kit-workflow
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill's workflow involves reading and analyzing external project files such as specifications, technical plans, and task lists. This introduces a surface for indirect prompt injection, where instructions embedded in those files could attempt to manipulate the agent's behavior during the 'Analyze' or 'Implement' phases.
- Ingestion points: The skill reads data from files at paths like
specs/###-feature-name/spec.md,plan.md, andtasks.md. - Boundary markers: The skill does not define specific delimiters or instructions to the agent to disregard embedded commands within these files.
- Capability inventory: The skill utilizes
Bash,Write,Edit, andSlashCommandtools to carry out the workflow. - Sanitization: There is no logic for sanitizing or validating the content of the ingested files before they are processed to generate implementation tasks.
Audit Metadata