spec-validation
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves a legitimate developer-tooling purpose, validating that specifications are technology-agnostic and testable without performing any high-risk operations.
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes specification files (e.g., spec.md) which may contain content from untrusted sources.
- Ingestion points: Content is read from local filesystem documents using the Read tool.
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are defined for the specification content.
- Capability inventory: The skill is limited to the Read, Grep, and Glob tools, which provide read-only access to the file system. It lacks network access, file-write capabilities, and code execution permissions.
- Sanitization: There is no explicit sanitization or escaping of the input data before it is processed by the agent.
Audit Metadata