specrail-write-tech-spec
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
checks/route_gate.pyto verify the state of the technical specification process before proceeding. This operation is scoped to the local repository. - [PROMPT_INJECTION]: The skill processes data from product specification files which represents a potential surface for indirect prompt injection, though no malicious patterns were detected.
- Ingestion points: Reads content from
specs/GH<issue-number>/product.mdin Step 1. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the ingested product specification.
- Capability inventory: The skill has the capability to execute shell commands (
python3) and write to the local file system (specs/GH<issue-number>/tech.md). - Sanitization: No explicit sanitization, validation, or escaping of the input file content is described in the workflow.
Audit Metadata