specstory-project-stats

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: Executes a Node.js script located at scripts/get-stats.js to process project identification logic and data retrieval.
  • [EXTERNAL_DOWNLOADS]: Connects to the SpecStory cloud API (https://cloud.specstory.com) to fetch project-related statistics. These requests are made to the official domain of the service associated with the skill.
  • [DATA_EXFILTRATION]: Reads local .git/config and .specstory/.project.json files to determine the repository name or project ID required for querying the statistics API. The data accessed is limited to project identifiers necessary for the core functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 03:25 AM