implement-spec
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external specifications and tickets which may contain untrusted content that could influence agent behavior.
- Ingestion points: SKILL.md (Step 1, Step 2) instructs the agent to read specs, tickets, and external documentation.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill text.
- Capability inventory: The skill possesses capabilities for git operations (creating branches/PRs, worktree management), spawning subagents, and writing Markdown notes to directories outside the repository.
- Sanitization: No sanitization or validation of the input data is mentioned.
Audit Metadata