to-spec

Pass

Audited by Gen Agent Trust Hub on Nov 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local repository, including source code and Architectural Decision Records (ADRs), which could contain adversarial instructions targeting the LLM. Ingestion points: Explore the repo, ADRs, and domain glossary as specified in SKILL.md. Boundary markers: Absent. The instructions do not specify delimiters for external content. Capability inventory: The skill is intended to read repository content and write a specification to an external issue tracker. Sanitization: Absent. No filtering or sanitization of ingested content is defined.
  • [NO_CODE]: The skill documentation and configuration do not include any scripts, executables, or dynamic code execution patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 7, 2026, 04:19 AM