cmd-speckit-constitution
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
git remote get-url origincommand to retrieve the repository name for project identification. This is a common and safe practice for developer tools to establish local context. - [SAFE]: File system operations are restricted to reading manifest files (package.json, mix.exs) and writing to the
.specify/memory/constitution.mdfile. These actions are within the expected scope of a documentation and configuration management skill. - [SAFE]: The skill includes a manual verification step, asking for user confirmation before writing any changes to the project files, which prevents unintended modifications.
Audit Metadata