speckit-git-validate
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard Git commands (
git rev-parse) to determine if the current directory is a Git repository and to retrieve the current branch name. These commands are non-destructive and limited to local repository metadata. - [DATA_EXPOSURE]: The skill checks for the existence of specific directories under the
specs/folder relative to the branch name prefix. This is a local file system check used to verify project structure and does not expose sensitive user data. - [SAFE]: The skill lacks any network-reaching capabilities (no
curl,wget, or API calls). It does not access sensitive paths like.sshor.aws, and it does not contain any obfuscated code or remote dependency installations.
Audit Metadata