spec-driven-development
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional guidelines for a development workflow. It does not contain executable code, remote script downloads, or requests for sensitive system permissions.
- [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms. The skill emphasizes security best practices, such as explicitly instructing the user never to commit secrets.
- [SAFE]: All referenced internal skills use relative local paths, and external commands mentioned (e.g., npm build/test) are standard development practices within a controlled environment.
Audit Metadata