skills/nulfrog/skills/to-spec/Gen Agent Trust Hub

to-spec

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill synthesizes specifications from untrusted sources and publishes them to an external issue tracker for automated processing. Ingestion points: The agent reads the current conversation context and performs codebase exploration to synthesize the spec (SKILL.md). Boundary markers: The skill does not provide delimiters or instructions to ignore embedded commands in the synthesized output. Capability inventory: The skill is capable of publishing synthesized text to the project issue tracker (SKILL.md). Sanitization: No sanitization or validation logic is defined to clean the synthesized content before it is published and labeled for automated execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 10:25 AM