spec-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a methodology for engineering workflows. No malicious patterns, obfuscation, or persistence mechanisms were detected.
- [DATA_EXPOSURE]: The skill explicitly instructs the agent not to fetch remote content, reducing risks related to external data retrieval.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user requirements to generate documentation in the specs directory. 1. Ingestion points: User feature requests described in SKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: Writing Markdown documentation files. 4. Sanitization: Absent. The potential impact is limited to documentation generation and does not involve executable code or sensitive system operations, resulting in a safe assessment.
Audit Metadata