spec-writer
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileThe Spec Writer skill appears to be a documentation/engineering-design tool whose stated purpose is to generate precise, execution-ready specifications. Its footprint—focused on normative contracts, deepening passes, and structured conformance—aligns with that purpose. There are no evident patterns for credential access, unauthenticated network calls, or download-execute flows. Overall risk is low to moderate (benign with cautious monitoring). The primary concern would be ensuring that any generated specs do not disclose or imply privileged operational details or credentials in public artifacts. Maintain clear separation between design-time guidance and runtime execution capabilities to preserve alignment.