skills/xfstudio/skills/spec-clarify/Gen Agent Trust Hub

spec-clarify

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The workflow involves running a local bash script located at .specify/scripts/bash/check-prerequisites.sh. This script is used to verify environment prerequisites before processing data.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from spec.md to analyze ambiguity, which presents a vulnerability surface for indirect instructions. 1. Ingestion points: The file spec.md is read into the agent context in the 'Load spec' step. 2. Boundary markers: There are no defined delimiters or instructions provided to the agent to ignore potentially malicious content within the specification file. 3. Capability inventory: The skill utilizes shell script execution and file modification (updating spec.md) capabilities. 4. Sanitization: No evidence of input validation or sanitization of the specification content exists in the provided instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 04:35 AM