spec-kit-clarify
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is restricted to local file operations within the
specs/changes/directory. It follows a structured process of readingspec.md, generating clarification questions for the user, and updating the document based on responses. - [INDIRECT_PROMPT_INJECTION]: The skill reads external content from
spec.md, which could theoretically contain instructions. However, because the skill's capabilities are limited to text processing and documentation updates without network or command execution access, this surface does not present a significant security risk.
Audit Metadata