spec-driven

Pass

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool for project discovery and to run verification commands such as npm test and pytest. These executions are gated by mandatory stopping points that require user approval before the agent moves from planning to implementation.\n- [EXTERNAL_DOWNLOADS]: The README.md provides instructions to clone the skill from the author's GitHub repository. This is a standard installation procedure using a well-known service and the vendor's official resources.\n- [INDIRECT_PROMPT_INJECTION]: The skill scans the local codebase and specification files in the specs/ directory (ingestion points). It uses Markdown and EARS notation as boundary markers. The agent has file-writing and Bash execution capabilities. To sanitize external input, the skill enforces mandatory human review and approval gates at every phase (Clarify, Specify, Design, Implement, Validate), preventing automatic obedience to potentially malicious instructions within the project files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 8, 2026, 03:18 AM