speckit-check
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
specify checkcommand to diagnose the local environment. This is the intended primary function of the skill to verify tool availability. - [INDIRECT_PROMPT_INJECTION]: The skill processes and interprets output from the
specify checkcommand. While this represents an ingestion point for external data (tool output), there are no high-risk capabilities (like file writing or network exfiltration) triggered by this data in this specific skill.
Audit Metadata