project-spec-mirror
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python utility script
scripts/specctl.pywhich executes localgitcommands viasubprocess.run(). - Evidence: Multiple instances in
scripts/specctl.py(e.g.,subprocess.run(["git", *args], ...)). - Context: These executions are restricted to the local
gitbinary and are used for routine project management tasks like checking repository status, diffing commits, and listing files. The script explicitly sets environment variables to disable interactive prompts (GIT_TERMINAL_PROMPT=0).
Audit Metadata