implement-spec
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The workflow involves processing external specifications and tickets which are potential vectors for indirect prompt injection. • Ingestion points: SKILL.md instructs the agent to read specs and tickets, which are external inputs. • Boundary markers: The instructions do not define delimiters or provide guidance to the agent to disregard instructions found within the data. • Capability inventory: The agent is authorized to perform git operations, manage worktrees, and trigger implementer subagents to modify the codebase. • Sanitization: No validation or sanitization of the input data is described in the workflow.
- [NO_CODE]: The skill consists entirely of instructional markdown and configuration files, with no executable code or scripts provided.
Audit Metadata