spec-workflow-init
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a variety of shell commands to perform project reconnaissance and environment discovery.
- Evidence: Executes
git rev-parse,ls,find,cat, andgrepto identify package managers, CI/CD setups, databases, and existing coding guidelines inSKILL.md(Steps 1 and 2). - [COMMAND_EXECUTION]: The skill performs local file system operations to create configuration directories and write generated workflow files.
- Evidence: Uses
mkdir -pand file writing logic to initialize.claude/agents/and.codex/agents/directories and their respective configuration files inSKILL.md(Steps 4 and 6). - [SAFE]: The skill implements protective measures and follows secure development guidelines in its templates.
- Evidence: The generated reviewer agent instructions explicitly include checks for SQL injection, XSS, command injection, and hardcoded secrets in
references/agents/claude/workflow-reviewer.md. - [SAFE]: The skill ensures user oversight by requiring interactive confirmation for critical actions.
- Evidence: Uses
AskUserQuestionrounds to confirm output locations and provides warnings with confirmation prompts before overwriting any existing files inSKILL.md(Steps 3 and 5).
Audit Metadata