speckit-taskstoissues
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes a local environment script at
.specify/scripts/bash/check-prerequisites.shto validate the project state and locate the task definitions. - [COMMAND_EXECUTION]: Uses
git config --get remote.origin.urlto identify the target repository, preventing the accidental creation of issues in incorrect or unauthorized repositories. - [COMMAND_EXECUTION]: Employs the GitHub command-line tool (
gh) or equivalent Model Context Protocol (MCP) tools to create issues on the remote platform. This aligns with the skill's primary functional purpose. - [DATA_EXFILTRATION]: Processes content from
specs/<feature>/tasks.mdand transmits it to GitHub. This is a deliberate design choice for task management and does not involve unauthorized data movement.
Audit Metadata