spec-driven-workflow
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a local development workflow using provided Python scripts for specification analysis and traceability. These scripts (spec_lint.py, spec_parse.py, and trace_coverage.py) only utilize standard Python libraries and perform local file system read operations for parsing markdown and source code.
- [SAFE]: No network access, data exfiltration, or remote code execution patterns are present in the scripts or instructions.
- [COMMAND_EXECUTION]: The workflow involves executing the included Python scripts through the command line to perform linting and coverage checks. These commands are documented for the user and operate exclusively on local project files.
- [SAFE]: No instances of prompt injection, obfuscation, or hardcoded credentials were found within the skill files or documentation.
Audit Metadata