speckit-review-comments
Warn
Audited by Snyk on Jul 30, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W013: Attempt to modify system services in skill instructions.
- Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly requires locating and executing a repository script (.specify/scripts/bash/detect-changed-files.sh) and insists it must be run (even if hidden or excluded), which forces running arbitrary local code and could modify machine state or perform privileged actions, so it presents a meaningful risk.
Issues (1)
W013
MEDIUMAttempt to modify system services in skill instructions.
Audit Metadata