specstory-project-stats
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
Bashtool to run a local Node.js script (scripts/get-stats.js) which handles project identification and data retrieval.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface that processes content from external sources.\n - Ingestion points: Reads local files (
.git/config,.specstory/.project.json) and fetches data from the SpecStory Cloud API (cloud.specstory.com).\n - Boundary markers: No explicit delimiters are used in the instructions to separate untrusted data from agent instructions.\n
- Capability inventory: The skill is permitted to execute shell commands via Node.js.\n
- Sanitization: The script parses JSON but does not filter content before the agent presents results to the user.
Audit Metadata