speckit-implement
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a prerequisite bash script located at
.specify/scripts/bash/check-prerequisites.shand runs shell commands likegit rev-parse. It also triggers commands defined within the.specify/extensions.ymlproject configuration. - [INDIRECT_PROMPT_INJECTION]: The skill ingests instructions from multiple project-level documentation files to guide its execution and task management. 1. Ingestion points:
.specify/extensions.yml,tasks.md,plan.md,data-model.md,contracts/,research.md,.specify/memory/constitution.md, andquickstart.md. 2. Boundary markers: The instructions do not specify any delimiters or safety warnings for the agent to ignore instructions embedded within these files. 3. Capability inventory: The skill can execute local bash scripts and invoke other skills viaEXECUTE_COMMAND. 4. Sanitization: No sanitization or schema validation is defined for the content of the ingested files. - [DYNAMIC_EXECUTION]: The skill dynamically generates and executes command identifiers at runtime by mapping strings found in the
.specify/extensions.ymlfile to command names (e.g., mappingspeckit.git.committo/speckit-git-commit).
Audit Metadata