speckit-implement
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local prerequisite check script located at
.specify/scripts/bash/check-prerequisites.shand various shell commands for project environment verification (e.g.,git rev-parse).- [COMMAND_EXECUTION]: The skill implements an extension hook system that automatically triggers the execution of commands defined in the project's.specify/extensions.ymlfile using theEXECUTE_COMMANDdirective.- [DATA_EXPOSURE]: The skill reads several project-specific files to build context, includingtasks.md,plan.md,data-model.md, and security-sensitive configuration like.specify/extensions.ymland.specify/memory/constitution.md.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the repository to drive its logic. * Ingestion points:tasks.md,plan.md,.specify/extensions.yml, and thecontracts/directory (SKILL.md). * Boundary markers: None. The skill does not use delimiters or warnings when processing instructions from these files. * Capability inventory: Shell script execution, file system modifications (creating ignore files), and command execution via extension hooks (SKILL.md). * Sanitization: None. The skill interprets content from the repository as direct instructions for the agent to follow during implementation.
Audit Metadata