tech-spec-review
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted technical specification documents from external sources, creating a potential surface for indirect prompt injection.
- Ingestion points: Documents are ingested via Notion (
mcp__claude_ai_Notion__notion-fetch), Google Docs, or local file reads. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the ingested tech spec content.
- Capability inventory: The skill is limited to reading data and generating a structured text report. It does not have capabilities for file writing, arbitrary command execution, or network exfiltration.
- Sanitization: There is no mention of sanitizing or filtering the content of the documents before they are processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill fetches content from external document hosting services.
- Evidence: The workflow uses
mcp__claude_ai_Notion__notion-fetchto retrieve content from Notion, a well-known service. This is a primary function of the skill and follows safe practices for document retrieval.
Audit Metadata