spec-lifecycle
Pass
Audited by Gen Agent Trust Hub on Feb 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill utilizes 'git mv' to transition files to an archive directory, which is a legitimate and safe operation within the context of managing project documentation.
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill ingests data from local markdown files in '.context/specs/'. 1. Ingestion points: local spec files; 2. Boundary markers: absent; 3. Capability inventory: 'git mv' and text updates; 4. Sanitization: absent. The risk remains low due to the limited scope of actions the agent can perform with this data.
- [DATA_EXPOSURE] (SAFE): No sensitive files, credentials, or environment variables are accessed. The skill's scope is restricted to its own documentation directory.
Audit Metadata