spec-to-code-compliance
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, such as blockchain whitepapers, design documents, and source code, which serves as an ingestion point for potential indirect prompt injection.
- Ingestion points: Phase 0 identifies
whitepaper.pdf,Protocol.md,README.md, and codebase files as external inputs. - Boundary markers: The instructions mandate a structured Intermediate Representation (IR) and strict evidence citation (file name + line numbers), which provides a logical boundary, though no technical delimiters are specified in the markdown.
- Capability inventory: The provided skill file contains instructions only and does not implement subprocess calls, network operations, or file-writing capabilities.
- Sanitization: The skill includes robust anti-hallucination requirements, such as 'Zero speculation', 'Never infer', and 'Always cite exact evidence', which serve as logical sanitization measures to mitigate the influence of injected instructions.
Audit Metadata