to-spec
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from the local repository, including source code and Architectural Decision Records (ADRs), which could contain adversarial instructions targeting the LLM. Ingestion points:
Explore the repo,ADRs, anddomain glossaryas specified inSKILL.md. Boundary markers: Absent. The instructions do not specify delimiters for external content. Capability inventory: The skill is intended to read repository content and write a specification to an external issue tracker. Sanitization: Absent. No filtering or sanitization of ingested content is defined. - [NO_CODE]: The skill documentation and configuration do not include any scripts, executables, or dynamic code execution patterns.
Audit Metadata