sdlc-create-spec
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from repository files and intent documents to generate specifications. Although this creates an ingestion surface, the risk is negligible due to the lack of execution capabilities.
- Ingestion points: Reads 'sdlc/work-item/intent.md' and repository files as defined in 'SKILL.md'.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified.
- Capability inventory: The skill is limited to writing markdown files ('spec.md') and using the 'AskUserQuestion' tool; it specifically prohibits modifying production code or creating implementation plans.
- Sanitization: No sanitization of input data is mentioned.
Audit Metadata