ns-sdd-living-spec-consolidator
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from task descriptions, git diffs, and version artifacts to update functional domain specifications. This ingestion of external content creates a surface for indirect prompt injection.
- Ingestion points:
task_description, behavioralgit diffoutputs, and markdown files located indocs/versions/(perSKILL.md). - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing external content into the living specs.
- Capability inventory: The skill performs file system write operations to the
docs/specs/directory. - Sanitization: There is no evidence of content sanitization or validation of the input data before it is appended to the living specification files.
Audit Metadata