skills/kenoxa/spine/spine-council/Gen Agent Trust Hub

spine-council

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill is designed to invoke the spine-advise command-line utility with the --stress flag. It passes user-provided arguments, including a decision artifact and an optional output path, directly to the shell command.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data in the form of a decision artifact, creating a surface for indirect prompt injection.
  • Ingestion points: The <decision-artifact> argument defined in SKILL.md serves as the entry point for external data.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill instructions.
  • Capability inventory: The skill utilizes the spine-advise tool to process the input artifact.
  • Sanitization: The skill does not perform any sanitization or validation of the input artifact before passing it to the authoritative spine-advise contract.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 11:14 PM
Security Audit — agent-trust-hub — spine-council