check-impl-against-spec
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data originating from external contributors via pull request artifacts.
- Ingestion points: The skill reads
spec_context.md,pr_diff.txt, andpr_description.mdto perform its analysis. - Boundary markers: There are no explicit instructions to use delimiters or ignore instructions embedded within the processed PR files.
- Capability inventory: The skill is capable of reading repository files and modifying
review.json. It does not have network access or arbitrary command execution capabilities. - Sanitization: No sanitization or strict schema validation is mentioned for the input text files before they are processed by the agent.
Audit Metadata