spezi-platform-selection
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local shell script,
scripts/clone-template.sh, to execute thegit clonecommand. This script incorporates a validation layer that restricts the operation to a hardcoded list of approved repository URLs, preventing arbitrary command injection or unauthorized downloads.- [EXTERNAL_DOWNLOADS]: The skill downloads project templates from theStanfordSpeziandCS342organizations on GitHub. These sources are trusted as they belong to the skill's author and related academic projects. The URLs are accessed over HTTPS to ensure transport security.
Audit Metadata