productspec-authoring

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the @productspec/parser package from the NPM registry to perform validation and management tasks. This package is a specific tool designed for the ProductSpec format and is managed by the skill's author.
  • [COMMAND_EXECUTION]: The skill provides instructions for executing the productspec CLI via npm exec. These commands are used to validate .product-spec.md files, Decision Traces, and Agent Runs. The use of the --yes flag is correctly documented as a way to ensure non-interactive execution in automated environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 07:28 PM
Security Audit — agent-trust-hub — productspec-authoring