specsfy-06-tdd-bdd
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and provides instructions to install specialized agent skills from the vendor's GitHub organization (
github.com/promovaweb/specsfy). These are well-known resources within the context of the skill's author and provide modular extensions for accessibility, security, and performance testing. - [COMMAND_EXECUTION]: The skill uses local Node.js scripts (
check_traceability.mjs,verify_acceptance.mjs, andcheck_database_safety.mjs) to automate compliance audits. These scripts perform read-only file system operations to check for traceability markers (e.g.,SPECSFY: US-001) and verify that acceptance criteria have corresponding test results in markdown documentation. - [SAFE]: Database safety protocols are explicitly enforced. The skill requires running a
check_database_safety.mjsscript before any test execution to prevent accidental data loss in production/development environments, specifically checking for environment variables likeAPP_ENV=testing.
Audit Metadata