spec-init
Warn
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
powershell -NoProfile -ExecutionPolicy Bypass -Fileto execute a local script. This pattern is often used to circumvent local security configurations designed to prevent script execution. - [COMMAND_EXECUTION]: The
spec-create-branch.shandspec-create-branch.ps1scripts execute variousgitcommands (checkout,branch,fetch) and file system operations based on user-provided inputs (--short-name,--source-file). While the scripts attempt to validate some inputs (e.g., kebab-case for short names), the interaction between user-controlled strings and shell execution poses a risk of command injection if validation is bypassed. - [DATA_EXFILTRATION]: The skill's documented behavior includes an explicit step to delete the source requirement file after processing (
Remove-SourceFilein PowerShell,rm -fin Bash). While this is disclosed to the user, such automated deletion of local files can be used by malicious skills to destroy evidence or remove sensitive data after exfiltration (though no explicit exfiltration was found in the static analysis).
Audit Metadata