style-spec-parity
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official MapLibre style specification repository on GitHub for alignment and comparison checks.
- [COMMAND_EXECUTION]: Instructions guide the user to run local project commands using the
misetask runner, including parity verification (mise run style-spec:parity) and test execution (mise run test:desktop). These are routine operations within the development environment. - [INDIRECT_PROMPT_INJECTION]: The parity tool processes a JSON-formatted style specification file (
v8.json). While the processing of external data represents a potential attack surface, the workflow uses pinned definitions from the project's own repository. - Ingestion points: Reads
v8.jsonfile content for comparison (SKILL.md). - Boundary markers: No explicit delimiter or instruction-isolation markers are documented in the instructions.
- Capability inventory: Executes local scripts (
ci/style_spec_parity.py) and library test suites via themiserunner. - Sanitization: No specific sanitization or filtering of the input JSON schema is mentioned in the instruction file.
Audit Metadata