speckit-review-comments

Warn

Audited by Snyk on Jul 30, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W013: Attempt to modify system services in skill instructions.

  • Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly requires locating and executing a repository script (.specify/scripts/bash/detect-changed-files.sh) and insists it must be run (even if hidden or excluded), which forces running arbitrary local code and could modify machine state or perform privileged actions, so it presents a meaningful risk.

Issues (1)

W013
MEDIUM

Attempt to modify system services in skill instructions.

Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 30, 2026, 09:09 PM
Issues
1
Security Audit — snyk — speckit-review-comments