speckit-require
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the GitHub Spec Kit (https://github.com/github/spec-kit) as the source for templates and script definitions. This is an official GitHub repository used for standard development workflows.
- [COMMAND_EXECUTION]: The skill uses local shell scripts and command-line tools such as
rg(ripgrep) to search within the project and execute automation scripts located in the.specify/directory (e.g.,check-prerequisites.sh). These are standard operations for a development utility intended to run in a project workspace. - [INDIRECT_PROMPT_INJECTION]: The skill processes user requirements and external templates to generate documentation. While this involves processing external data that could theoretically contain instructions, the skill uses a strictly defined multi-step workflow (specify -> clarify -> plan -> tasks) that focuses on document generation rather than executing arbitrary instructions from the content.
Audit Metadata