speckit-analyze
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script located at
.specify/scripts/bash/check-prerequisites.shto resolve project paths and verify file existence before analysis. This is a standard initialization pattern for repository-integrated skills. - [SAFE]: Operating constraints explicitly define a 'STRICTLY READ-ONLY' policy, preventing the skill from making any unauthorized modifications to the project files.
- [SAFE]: No network-enabled tools or data exfiltration patterns were identified. The skill's output is limited to a structured markdown report provided directly in the agent's response.
- [SAFE]: The documentation and logic are transparent, with no signs of obfuscation, credential harvesting, or attempts to bypass system security protocols.
Audit Metadata