to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to generate documentation (specifications/PRDs) based on existing conversation history and repository context. It provides a clear template and logical process for synthesizing information without introducing external risks.
- [INDIRECT_PROMPT_INJECTION]: The skill processes conversation context to generate its output. While this presents a theoretical surface for indirect injection (where malicious instructions in a conversation could influence the spec content), the risk is minimal as the output is restricted to a structured documentation template and the skill explicitly limits the use of code snippets.
- Ingestion points: Reads current conversation context and repository content.
- Boundary markers: None present for the input conversation data.
- Capability inventory: Writing/publishing to an external issue tracker.
- Sanitization: No explicit sanitization of input conversation content is described.
Audit Metadata