app-spec-packager
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a local helper script
scripts/create_spec_package.pyto automate the creation of document folders. The script uses only standard Python libraries (argparse,pathlib,shutil,zipfile) and does not perform any network operations. - [SAFE]: Directory traversal via user-supplied names or slugs is mitigated by a sanitization function (
slugify) in the Python script, which restricts filenames to alphanumeric characters and hyphens. - [SAFE]: The instructions in
SKILL.mdand the reference documents (references/safety-privacy.md) explicitly mandate security and privacy best practices for the specifications being generated, such as data classification and logging policies.
Audit Metadata