feature-spec

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to run verification commands such as npm run type-check, npm run lint, and npm run test:unit. It also uses the gh CLI (gh issue create) to automate the creation of GitHub issues after the planning phase is complete.
  • [EXTERNAL_DOWNLOADS]: The skill fetches protocol specifications and documentation from official and well-known sources, specifically modelcontextprotocol.io and github.com/modelcontextprotocol. These are used neutrally for design reference.
  • [DATA_EXFILTRATION]: The skill reads from the local filesystem, including potential sibling repositories (e.g., apify-mcp-server-internal), to assess design impact. While it sends a summary of this data to GitHub via issue creation, the instructions explicitly require the agent to present the content to the user for review before submission, providing a human-in-the-loop safety checkpoint.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 03:12 PM