cmd-speckit-tasks

Pass

Audited by Gen Agent Trust Hub on Apr 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates entirely on local files within the project environment to facilitate documentation. It reads specification and planning files to derive task breakdowns.
  • [DATA_EXPOSURE]: The skill accesses project-specific files like spec.md and plan.md. This behavior is aligned with its stated purpose of generating task lists from requirements and is not considered a security risk.
  • [COMMAND_EXECUTION]: While the skill is described as a wrapper for a command, it does not execute arbitrary shell commands. It uses templated instructions to guide the agent in formatting a markdown file.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 27, 2026, 07:41 AM
Security Audit — agent-trust-hub — cmd-speckit-tasks