speckit-specify
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates the execution of local shell scripts (
scripts/create-new-feature.sh) to automate branch creation and file system initialization. These operations use properly sanitized variables (e.g., usingsedto strip non-alphanumeric characters from branch suffixes) and are confined to the repository's workspace. \n- [EXTERNAL_DOWNLOADS]: The included bash scripts invokegit fetch --all --pruneto synchronize branch information with the repository's configured remote. This is a standard developer operation and does not involve downloading code from untrusted or arbitrary external sources.
Audit Metadata