write-techspec
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a local CLI command
roundfix spec check <slug> --stage techspecto validate the generated artifacts. Theslugparameter is sourced from user-supplied arguments. - [INDIRECT_PROMPT_INJECTION]: The skill processes various external project documents as reference material, which creates an attack surface where these files could potentially influence agent behavior.
- Ingestion points: Data is ingested from
$ARGUMENTSand local project files includingdocs/specs/<slug>/_prd.md,docs/adr/,CONTEXT.md, and architectural guides indocs/agents/. - Boundary markers: The skill does not define specific delimiters to isolate external content from the agent's core instructions.
- Capability inventory: The skill has access to file writing operations and the ability to execute the
roundfixsubprocess. - Sanitization: No sanitization or content filtering is performed on the ingested documentation data.
Audit Metadata