spec-driven-development
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional templates and a four-phase workflow (Specify, Plan, Tasks, Implement) for software development. It does not perform any sensitive operations, network requests, or unauthorized file access.\n- [INDIRECT_PROMPT_INJECTION]: The skill acts as an intermediary that processes user-provided requirements.\n
- Ingestion points: User requirements for new projects or features enter the context during the 'Specify' phase (SKILL.md).\n
- Boundary markers: The skill uses a structured Markdown template for specifications, which helps separate user requirements from instructions.\n
- Capability inventory: The skill is primarily instructional and focused on documentation; implementation is deferred to other referenced skills.\n
- Sanitization: Includes a mandatory requirement for clarifying questions and assumption listing, which serves as a natural validation step for user input.
Audit Metadata