specrail-check-impl-against-spec
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [NO_CODE]: The skill is composed entirely of markdown instructions and does not include any executable scripts, binaries, or configuration files that could run code.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection risk because it ingest untrusted data from external repository files.
- Ingestion points: The skill reads
product.md,tech.md,tasks.md, linked issues, and pull request diffs (SKILL.md). - Boundary markers: The instructions do not define delimiters or specific warnings to ignore instructions embedded within the ingested files.
- Capability inventory: The skill itself has no scripts, but the agent using it may have access to file system or command tools that could be manipulated by adversarial content in the reviewed files.
- Sanitization: No sanitization, escaping, or validation of external file content is implemented.
Audit Metadata