specsfy-aux-database
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (
scripts/update_database.mjs) and a monitoring command ($specsfy-setup). These are internal tools provided with the skill for project-specific documentation maintenance. - [DATA_EXPOSURE]: The skill instructions and scripts explicitly contain rules to avoid sensitive data. The instructions mandate avoiding production data, connection strings, or
.envvalues. The script specifically reads.env.example(which typically contains non-sensitive placeholders) to identify the database driver type. - [REMOTE_CODE_EXECUTION]: No remote code execution or external downloads were detected. All scripts are local to the skill package.
Audit Metadata