write-a-spec
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for technical planning and documentation. It analyzes existing repository structures to provide context for new specifications, which is a legitimate and safe operation for its stated purpose.
- [DATA_EXPOSURE]: While the skill reads codebase content to understand module boundaries and test coverage, it only uses this information to populate planning documents locally or on GitHub. No evidence of sensitive data exfiltration to unauthorized third parties was found.
- [COMMAND_EXECUTION]: The skill's output is limited to creating Markdown files in a local directory (
./plans/) or publishing GitHub issues. These operations are restricted to documentation and do not involve the execution of untrusted scripts or system commands.
Audit Metadata