agent-spec-authoring
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
agent-specCLI tool viacargo install. This is a functional dependency required for the tool's core operations of parsing and linting specifications.- [COMMAND_EXECUTION]: The skill instructs the agent to execute CLI commands such asagent-spec parse,agent-spec lint, andagent-spec init. These are legitimate operations used for scaffolding, validating, and ensuring the quality of the task specifications.- [PROMPT_INJECTION]: The skill manages a surface for indirect prompt injection through its authoring workflow. (1) Ingestion points: User-provided task descriptions and intent. (2) Boundary markers: The skill enforces strict section headers (e.g.,## Intent,## Boundaries) and path globs for Allowed Changes. (3) Capability inventory: Subprocess calls to theagent-specCLI for parsing and validation. (4) Sanitization: The skill implements a mandatory quality gate usingagent-spec lintwith a minimum score of 0.7 to ensure that generated specs are deterministic and testable.
Audit Metadata