speckit-tasks
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local shell script located at
.specify/scripts/bash/check-prerequisites.sh. This is a standard setup procedure for this toolset to verify environment variables and available documents. - [PROMPT_INJECTION]: The skill processes content from documentation files (e.g.,
plan.md,spec.md) that could be modified by external contributors, creating a surface for indirect prompt injection. - Ingestion points: Files located in
specs/<feature>/andcontracts/directories. - Boundary markers: No explicit delimiters or instructions are used to separate untrusted document content from the agent's task-generation logic.
- Capability inventory: The agent has capabilities to write to the file system (
specs/<feature>/tasks.md) and execute local scripts. - Sanitization: There is no mentioned validation or sanitization of the markdown content before it is parsed for task generation.
Audit Metadata