afk-to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected. The skill performs documentation synthesis by exploring the local repository and summarizing conversation context into a structured template.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted conversation data and codebase content to generate specifications. This is a common surface for indirect prompt injection, but the skill's capabilities are limited to documentation generation.
- Ingestion points: The skill synthesizes information from the "current conversation context and codebase understanding" as specified in
SKILL.md. - Boundary markers: None explicitly defined to distinguish between user instructions and data within the synthesized content.
- Capability inventory: The skill performs repository exploration, writes local files (specs), and publishes to a project issue tracker when requested.
- Sanitization: No explicit sanitization or validation of the synthesized content is mentioned.
Audit Metadata