explain-spsq
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run shell commands to validate sequence files using the vendor's
synapseqtool (e.g.,bin/synapseq -testandgo run ./cmd/synapseq -test). These commands are scoped to validation and use the-testflag to avoid side effects. - [INDIRECT_PROMPT_INJECTION]: The skill processes external
.spsqand.spscfiles, which constitutes a potential surface for indirect prompt injection. - Ingestion points: Loading sequence content and dependencies as described in the sequence walkthrough section of
SKILL.md. - Boundary markers: Detailed instructions guide the agent to interpret files strictly as audio scores and maintain grounded, behavioral descriptions.
- Capability inventory: Shell command execution is available through the local
synapseqvalidation binary. - Sanitization: The agent is instructed to treat the official parser and sequence builder as authoritative for validation rather than performing manual text interpretation.
Audit Metadata