skills/ariadoss/superskills/specify/Gen Agent Trust Hub

specify

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage a git repository, including git fetch --all --prune, git ls-remote, git branch, and implicitly git checkout to create feature-specific branches.
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations via git fetch and git ls-remote to synchronize with the remote origin. These operations target the project's configured git hosting service, which is generally considered a well-known service.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user input to drive core logic and command generation.
  • Ingestion points: Natural language feature descriptions are ingested via the $ARGUMENTS variable in SKILL.md.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the ingestion process.
  • Capability inventory: The skill possesses the ability to execute shell commands (git) and perform file system writes (specs/ and checklists/ directories).
  • Sanitization: There is no evidence of sanitization or validation performed on the user-provided text before it is used to generate keywords for branch names or content for the specification files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 04:27 AM