afk-to-spec
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute a CLI tool named
plannotatorwith the commandplannotator annotate --gate <path-to-spec>as part of the specification review process inSKILL.md.\n- [PROMPT_INJECTION]: The skill ingests untrusted data from the conversation history and repository state, which creates a surface for indirect prompt injection.\n - Ingestion points: Conversation history and codebase understanding are synthesized into a specification in
SKILL.md.\n - Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between its operational instructions and the potentially untrusted content being processed.\n
- Capability inventory: The skill has the ability to write local files, interact with project issue trackers, and execute shell commands (
plannotator).\n - Sanitization: The instructions do not include any steps for sanitizing or validating the ingested content before it is used to generate output or execute commands.
Audit Metadata