speckit-specify

Pass

Audited by Gen Agent Trust Hub on Mar 11, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill orchestrates the execution of local shell scripts (scripts/create-new-feature.sh) to automate branch creation and file system initialization. These operations use properly sanitized variables (e.g., using sed to strip non-alphanumeric characters from branch suffixes) and are confined to the repository's workspace. \n- [EXTERNAL_DOWNLOADS]: The included bash scripts invoke git fetch --all --prune to synchronize branch information with the repository's configured remote. This is a standard developer operation and does not involve downloading code from untrusted or arbitrary external sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 11, 2026, 12:16 PM