implement-spec
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external specifications and task tickets which may contain malicious instructions designed to influence the behavior of the primary agent or its subagents.
- Ingestion points: External specifications and tickets defined as inputs for the workflow in SKILL.md.
- Boundary markers: The instructions do not define delimiters or structural constraints to isolate the untrusted specification data from the agent's logic.
- Capability inventory: The skill performs file system operations (saving notes), extensive Git operations (branch/PR/worktree/merge), and orchestrates multiple subagents as described in SKILL.md.
- Sanitization: No validation or escaping of external specification content is specified before it is processed by the agents.
Audit Metadata