spec-doc
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from the user's codebase to generate documentation, which could allow adversarial instructions embedded in code comments or strings to influence the agent.
- Ingestion points: The skill performs a multi-layer scan of the target directory, reading entry points, data models, public interfaces, internal logic, configuration files (including environment variables), and tests (SKILL.md, Phase 1.2).
- Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between data to be documented and potential instructions embedded within the scanned files.
- Capability inventory: The agent has the ability to read arbitrary files within the target scope and write the generated documentation to the filesystem at
docs/spec.mdor module-specific paths. - Sanitization: No sanitization, filtering, or validation is performed on the content read from the source files before it is processed and written to the output file.
Audit Metadata