implement-spec
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external specifications and task graphs (issues) to drive code implementation. 1. Ingestion points: Specification documents and issue/ticket descriptions. 2. Boundary markers: Absent; there are no instructions to delimit data from instructions within the specs. 3. Capability inventory: File system writes, git operations (branching, worktrees, merging), and tool execution (code-review skill). 4. Sanitization: Absent; the agent is not instructed to sanitize or validate the content of the specifications.
- [DATA_EXFILTRATION]: The instructions require the agent to save markdown notes to a directory outside of the current repository. While intended for shared access between sub-agents, writing to arbitrary paths outside the workspace increases the risk of unauthorized file access or data exposure if the agent's environment is not strictly sandboxed.
Audit Metadata