skills/akiojin/skills/speckit-require/Gen Agent Trust Hub

speckit-require

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the GitHub Spec Kit (https://github.com/github/spec-kit) as the source for templates and script definitions. This is an official GitHub repository used for standard development workflows.
  • [COMMAND_EXECUTION]: The skill uses local shell scripts and command-line tools such as rg (ripgrep) to search within the project and execute automation scripts located in the .specify/ directory (e.g., check-prerequisites.sh). These are standard operations for a development utility intended to run in a project workspace.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user requirements and external templates to generate documentation. While this involves processing external data that could theoretically contain instructions, the skill uses a strictly defined multi-step workflow (specify -> clarify -> plan -> tasks) that focuses on document generation rather than executing arbitrary instructions from the content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:32 PM