speckit-git-validate
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses local Git commands like
git rev-parseto retrieve the current branch name for validation purposes. - [SAFE]: Branch name validation is performed using strict regular expressions (
^[0-9]{3,}-and^[0-9]{8}-[0-9]{6}-), which effectively sanitizes input before it is used for local directory lookups. - [SAFE]: File system operations are limited to checking for the existence of directories within the project's
specs/folder, which is a benign activity. - [SAFE]: The use of the
SPECIFY_FEATUREenvironment variable as a fallback is a standard configuration practice and does not involve data exfiltration or credential exposure.
Audit Metadata