spec-coverage-assessment

Pass

Audited by Gen Agent Trust Hub on Jul 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a procedural guide for assessing 'governance coverage' of software subsystems, involving inventorying files and checking for associated documentation.
  • [SAFE]: Instructions involve standard command-line utilities such as ripgrep (rg), tokei, and wc to perform local analysis of project files.
  • [SAFE]: The skill uses internal tool commands (prefixed with doctrine) which appear to be part of the organization's specific workflow for managing specifications (ADRs, PRDs, Tech Specs).
  • [SAFE]: No network operations, external downloads from untrusted sources, or credential harvesting patterns were identified.
  • [SAFE]: The logic includes safety-conscious checks, such as verifying the 'liveness' of file anchors (using test -e) before trusting them as valid coverage signals.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 22, 2026, 08:47 AM
Security Audit — agent-trust-hub — spec-coverage-assessment