change-specify
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes bundled shell and PowerShell scripts (
scripts/bash/setup-change-specify.shandscripts/powershell/setup-change-specify.ps1) during Phase 1 to resolve the repository root and directory paths. - [DYNAMIC_EXECUTION]: The Bash setup script uses
python3with an inline heredoc to process environment variables and output a structured JSON object for the agent. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data via the
$ARGUMENTSparameter to facilitate the creation of Change Decision Record (ChDR) drafts. - Ingestion points: User input provided via the
$ARGUMENTSblock inSKILL.md. - Boundary markers: Uses a guided facilitation process (Phase 3) with specific questions to structure input before document generation.
- Capability inventory: File system write access to
.adlc/drafts/chdr/and execution of bundled shell/Python scripts. - Sanitization: Includes explicit instructions to "Synthesize, don't transcribe" and forbids copying instructions verbatim from issues, commits, or logs.
Audit Metadata