speckit-git-feature
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands, including
git rev-parseand a project-specific script located at.specify/extensions/git/scripts/bash/create-new-feature.sh. These operations are local to the repository environment. - [COMMAND_EXECUTION]: The skill interpolates user-supplied data (feature descriptions) into a shell command. It provides explicit instructions for the AI agent to escape single quotes (e.g., using
'I'\''m Groot') to reduce the risk of command injection during this process. - [COMMAND_EXECUTION]: The skill uses environment variables (
GIT_BRANCH_NAME) to pass data to the underlying shell script, which is a standard method for controlling script behavior.
Audit Metadata