speckit-review-code
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill mandates the execution of a project-local bash script at '.specify/scripts/bash/detect-changed-files.sh'. This script is a core component of the spec-kit framework used to programmatically detect file changes instead of using standard git commands.
- [PROMPT_INJECTION]: The skill processes untrusted content from the repository being reviewed, including code files and project guidelines, creating a surface for indirect prompt injection.
- Ingestion points: Code files and project guidelines (e.g., .specify/memory/constitution.md, CLAUDE.md).
- Boundary markers: No delimiters or ignore instructions for embedded content are present.
- Capability inventory: Execution of local scripts and reading of project filesystem content.
- Sanitization: No explicit sanitization or validation of the ingested code/guideline content is performed.
Audit Metadata