spec-kitty-tasks

Pass

Audited by Gen Agent Trust Hub on Apr 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill functions as a structured planner that processes design documents (like plan.md and spec.md) to create implementation tasks. It uses platform-specific CLI tools (spec-kitty) and standard git commands (git checkout, git branch) for workflow management.
  • [SAFE]: File operations are performed within the scope of a designated planning repository. The skill explicitly enforces the use of absolute paths retrieved from the system environment to prevent path traversal or unauthorized file access.
  • [SAFE]: No unauthorized network operations, hardcoded credentials, or obfuscated code patterns were detected. The use of user input via $ARGUMENTS is standard for receiving instructions in this context.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 3, 2026, 06:08 PM
Security Audit — agent-trust-hub — spec-kitty-tasks