spec-pack-abandon

Pass

Audited by Gen Agent Trust Hub on Jul 28, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs destructive operations including the deletion of local directories and git branches. It uses PowerShell's Remove-Item -Recurse -Force to clean up specific paths like .aidlc/specs/{branch} and demo/prototypes/{branch}.
  • [COMMAND_EXECUTION]: It executes Git commands to delete both local and remote branches (git branch -D and git push origin --delete). These actions are the primary purpose of the skill and are protected by confirmation gates.
  • [PROMPT_INJECTION]: The instructions include defensive patterns to prevent accidental execution. It mandates two separate user confirmation steps requiring exact phrases ("确认删除清单" and "最终确认执行删除") before any destructive command is revealed or executed.
  • [EXTERNAL_DOWNLOADS]: The skill depends on an internal workspace script located at skills\spec-context\scripts\spec-common.ps1. This is a local file dependency within the agent's environment.
  • [DATA_EXFILTRATION]: While the skill interacts with a remote git server (git push, git ls-remote), these operations are limited to the specific task of branch management and deletion as requested by the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 28, 2026, 08:08 AM
Security Audit — agent-trust-hub — spec-pack-abandon