recursive-spec
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill calls
scripts/recursive-init.pyorscripts/recursive-init.ps1to initialize project run folders. This is a functional component of the automated workflow designed for the repository environment. - [SAFE]: The skill demonstrates an ingestion surface for Indirect Prompt Injection as it reads untrusted repository data (documented in
SKILL.mdasSTATE.md,DECISIONS.md,MEMORY.md, and source code) to inform its drafting process. This context-gathering behavior is localized to the repository and serves the primary purpose of the skill, with capabilities limited to invoking a local initialization script. - [SAFE]: No external network requests, obfuscated code, or unauthorized file access patterns were identified. The skill maintains restricted operations by drafting specs in temporary artifacts until explicit user approval is granted.
Audit Metadata