01-technical-specification
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from multiple external project files, which serves as a potential surface for indirect prompt injection attacks.
- Ingestion points: The skill reads
LLD.md,SRS_Draft.md, andtech_stack.mdto extract module contracts, requirements, and technology details. - Boundary markers: The instructions lack explicit boundary markers or "ignore" directives to prevent the agent from following malicious instructions that might be hidden within the project documents.
- Capability inventory: The skill has the capability to read files from the project directory and write the resulting
Technical_Specification.mdback to the filesystem. - Sanitization: There is no evidence of sanitization or content validation to filter out potential prompt injection strings (e.g., "Ignore previous instructions") within the source files before processing.
Audit Metadata