implement-spec
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes externally-defined specifications and tickets which guide the behavior of implementer and exploration subagents.
- Ingestion points: Reads user-provided specs, tickets, and project documentation (e.g.,
docs/agents/stack.md). - Boundary markers: None defined; the agent is instructed to follow the task graph defined in these documents.
- Capability inventory: Branch management (creation, merging, resetting), file system operations (saving markdown notes), and invocation of other skill tools (
tdd,code-review). - Sanitization: No explicit sanitization of input data is described before it influences subagent tasks.
Audit Metadata