specsfy-aux-stack
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs routine project maintenance tasks. It scans the project directory for common manifest files to identify the technologies used in the codebase.
- [COMMAND_EXECUTION]: The provided Node.js script uses
spawnSyncto execute thegit check-ignorecommand. This is used to respect the project's .gitignore settings during its recursive file scan. This is standard behavior for development tools and is used safely here. - [DATA_EXPOSURE]: The skill reads project configuration files (e.g., package.json, composer.json) to extract metadata about the technology stack. It does not access sensitive files such as SSH keys, AWS credentials, or environment secrets, nor does it perform any network operations to exfiltrate data.
Audit Metadata