spine-council
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to invoke the
spine-advisecommand-line utility with the--stressflag. It passes user-provided arguments, including a decision artifact and an optional output path, directly to the shell command. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data in the form of a decision artifact, creating a surface for indirect prompt injection.
- Ingestion points: The
<decision-artifact>argument defined inSKILL.mdserves as the entry point for external data. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill instructions.
- Capability inventory: The skill utilizes the
spine-advisetool to process the input artifact. - Sanitization: The skill does not perform any sanitization or validation of the input artifact before passing it to the authoritative
spine-advisecontract.
Audit Metadata