spec-merger
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes requirement descriptions and scenarios from delta specification files (specs//spec.md) and interpolates them into the main baseline specs.
- Ingestion points: Files located within the changes// directory.
- Boundary markers: The instructions do not specify the use of delimiters or specific instructions to the agent to treat the requirement text as untrusted data during the merge.
- Capability inventory: The skill performs file read operations on delta specs and write operations to the root specs/ directory to update the published baseline via the ssf tool.
- Sanitization: While the skill performs structural validation (matching headers and requirement names), it does not include mechanisms to sanitize or validate the natural language content of the requirements themselves, which could be used to host malicious instructions.
Audit Metadata