spec-charter
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows established patterns for project management and documentation. It primarily interacts with standard project files and does not attempt to access sensitive system areas or credentials.
- [COMMAND_EXECUTION]: The skill utilizes a provided Node.js script,
scripts/check-size.js, to validate the word and line counts of the charter file. The script is bundled with the skill, uses only native Node.js modules (fs,path), and performs no network operations or external process spawning. - [PROMPT_INJECTION]: The instructions provide a structured framework for the agent to act as a documentation maintainer. There are no attempts to override the core model's safety constraints, ignore prior instructions, or leak system prompts.
- [DATA_EXFILTRATION]: The skill does not contain any network-facing code or instructions to send data to external domains. All operations are confined to the local repository context.
Audit Metadata