spec-driven
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool for project discovery and to run verification commands such asnpm testandpytest. These executions are gated by mandatory stopping points that require user approval before the agent moves from planning to implementation.\n- [EXTERNAL_DOWNLOADS]: TheREADME.mdprovides instructions to clone the skill from the author's GitHub repository. This is a standard installation procedure using a well-known service and the vendor's official resources.\n- [INDIRECT_PROMPT_INJECTION]: The skill scans the local codebase and specification files in thespecs/directory (ingestion points). It uses Markdown and EARS notation as boundary markers. The agent has file-writing andBashexecution capabilities. To sanitize external input, the skill enforces mandatory human review and approval gates at every phase (Clarify, Specify, Design, Implement, Validate), preventing automatic obedience to potentially malicious instructions within the project files.
Audit Metadata