write-acceptance-spec
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection due to its core functionality of processing external, potentially untrusted data.
- Ingestion points: The agent reads data from
.scratchpad/<slug>/interview-decisions.md,.scratchpad/<slug>/domain-language.md, current project code, and existing Architecture Decision Records (ADRs). - Boundary markers: The instructions do not define specific delimiters or warnings to the agent to disregard instructions embedded within these source files.
- Capability inventory: The skill has the capability to write new files to the
docs/directory and perform git commits using thegit-commit-organizertool. - Sanitization: There is no explicit sanitization or validation of the input data before it is interpolated into the final specification document or used to determine commit metadata.
Audit Metadata