specsfy-progress
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project specification files (
spec.md) which may contain instructions that could influence agent behavior. The logic inscripts/progress.mjsdetermines thenext_skillto be loaded based on theStatusfield found in these documents. - Ingestion points: Data is ingested from files located in the
specs/directory tree (e.g.,specs/draft/*/spec.md). - Capability inventory: The skill can execute local shell commands (Node.js scripts) and initiate automatic handoffs to other agent skills without user confirmation.
- Boundary markers: The skill does not use specific delimiters or instructions to prevent the agent from following directions potentially embedded in the specification files.
- Sanitization: Data parsed from markdown files is used directly to drive the workflow and transition logic without sanitization or validation.
- [COMMAND_EXECUTION]: The skill's primary function involves running several local Node.js scripts (
progress.mjs,analyze_context.mjs) and utility scripts from related skills (monitor_context.mjs,build_documentation.mjs). It also utilizes thenpxcommand for installing additional components. - [EXTERNAL_DOWNLOADS]: The
references/specialists.mdfile provides instructions for downloading and installing additional specialist skills from the vendor's GitHub repository (github.com/promovaweb/specsfy) using thenpx skills addcommand. This represents expected vendor functionality for extending the skill's capabilities.
Audit Metadata