implement-spec
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted data in the form of specifications and tickets.
- Ingestion points: Reads 'spec' and 'tickets' files to understand the task graph and requirements.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the specs/tickets.
- Capability inventory: The skill manages branches, worktrees, and orchestrates 'implementer', 'exploration', and 'merger' subagents to modify the codebase.
- Sanitization: No explicit sanitization or validation of the specification content is mentioned.
Audit Metadata