spec-driven-development
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a procedural workflow for requirement analysis, project planning, and implementation steps.
- [SAFE]: The instructions promote security best practices, explicitly listing the commitment of secrets as a prohibited action under project boundaries.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external requirements, PRDs, and user-provided ideas. It mitigates injection risks by implementing a mandatory four-phase workflow where a human must review and approve the AI's interpretation and planning (Specify, Plan, Tasks, Implement) before any code execution occurs.
Audit Metadata