app-spec-packager
Pass
Audited by Gen Agent Trust Hub on May 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill includes extensive references and rules for designing secure, privacy-preserving, and compliant applications. It provides templates for data classification, logging policies that scrub sensitive content, and security controls such as server-side authorization and secret management.
- [COMMAND_EXECUTION]: The skill uses a provided Python script (
scripts/create_spec_package.py) to automate the creation of a structured directory and set of Markdown files. This script uses standard libraries and performs legitimate scaffolding operations without accessing unauthorized system paths. - [EXTERNAL_DOWNLOADS]: The agent is instructed to research recent platform rules, SDK versions, and security requirements from official sources (e.g., Apple, Google, AI providers) to ensure specification accuracy. This external data retrieval is a standard part of the documentation workflow.
Audit Metadata