spec-to-repo
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were identified during the analysis of the instructions, references, or scripts.
- [COMMAND_EXECUTION]: The skill uses local Python scripts to process configuration files and text inputs. These operations are limited to the Python standard library and do not involve network access or high-privilege system modifications.
- [DATA_EXFILTRATION]: No network-enabled tools or hardcoded credentials were found. All data processing remains local to the execution environment.
- [PROMPT_INJECTION]: The skill ingests untrusted data from product specifications and PR plans. While this creates a potential injection surface, the processing is performed by scripts that transform the data into structured reports, reducing the risk of direct instruction obedience. Ingestion points: prd.json, pr_plan.json, and branches.txt. Boundary markers: Absent. Capability inventory: Local script execution via command line. Sanitization: Absent.
Audit Metadata