to-spec
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user dialogue and project context to generate a specification document. While it ingests potentially untrusted data, the output is restricted to a markdown template intended for project tracking, presenting a low risk of malicious instruction adherence.
- [COMMAND_EXECUTION]: The instructions reference a setup command,
/setup-ouyangjiahong-skills, to define issue tracker terminology. This command is associated with the skill author's toolset and is used for environment configuration. - [NO_CODE]: The skill consists entirely of markdown instructions and templates for the agent to follow. It does not include external scripts, binary files, or automated execution logic beyond processing text context.
Audit Metadata