specstory-project-stats
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Executes a Node.js script located at
scripts/get-stats.jsto process project identification logic and data retrieval. - [EXTERNAL_DOWNLOADS]: Connects to the SpecStory cloud API (
https://cloud.specstory.com) to fetch project-related statistics. These requests are made to the official domain of the service associated with the skill. - [DATA_EXFILTRATION]: Reads local
.git/configand.specstory/.project.jsonfiles to determine the repository name or project ID required for querying the statistics API. The data accessed is limited to project identifiers necessary for the core functionality.
Audit Metadata