feature-spec
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run verification commands such asnpm run type-check,npm run lint, andnpm run test:unit. It also uses theghCLI (gh issue create) to automate the creation of GitHub issues after the planning phase is complete. - [EXTERNAL_DOWNLOADS]: The skill fetches protocol specifications and documentation from official and well-known sources, specifically
modelcontextprotocol.ioandgithub.com/modelcontextprotocol. These are used neutrally for design reference. - [DATA_EXFILTRATION]: The skill reads from the local filesystem, including potential sibling repositories (e.g.,
apify-mcp-server-internal), to assess design impact. While it sends a summary of this data to GitHub via issue creation, the instructions explicitly require the agent to present the content to the user for review before submission, providing a human-in-the-loop safety checkpoint.
Audit Metadata