spec-test
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests external requirement documents such as
solution.mdandprd.mdto produce verification artifacts like test plans and reports. This creates an ingestion surface for indirect prompt injection, where an attacker could embed malicious instructions in these documents to influence the agent's behavior during the generation process. - Ingestion points: The skill reads from
project/memory/*.mdand{FEATURE_DIR}/requirements/*.md. - Boundary markers: No specific delimiters or instructions are provided to help the agent distinguish between data and instructions within the ingested requirement files.
- Capability inventory: The skill is capable of writing multiple Markdown files to the
{FEATURE_DIR}/verification/path based on external data. - Sanitization: The skill lacks explicit sanitization or validation logic for the content of the documents it processes.
Audit Metadata