create-tech-spec
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is the generation of technical documentation based on existing project files.
- It reads local project documentation (
docs/prd.md,docs/decisions/) and writes specification files todocs/specs/. - The workflow does not involve installing external dependencies, executing remote code, or performing unauthorized system commands.
- [SAFE]: No sensitive data exposure or exfiltration patterns were detected.
- Mentions of API keys, tokens, or environment variables are limited to documentation templates and security checklists intended to guide the user in following best practices.
- [SAFE]: The reference files contain technical boilerplate and code examples (Python, Rust, Go, TypeScript) that are standard industry patterns and do not contain executable malicious logic.
- While the reference documentation is highly repetitive across numerous sections, this appears to be a documentation style choice rather than a technique for obfuscation or concealment.
Audit Metadata