spec-pack-abandon
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs destructive operations including the deletion of local directories and git branches. It uses PowerShell's
Remove-Item -Recurse -Forceto clean up specific paths like.aidlc/specs/{branch}anddemo/prototypes/{branch}. - [COMMAND_EXECUTION]: It executes Git commands to delete both local and remote branches (
git branch -Dandgit push origin --delete). These actions are the primary purpose of the skill and are protected by confirmation gates. - [PROMPT_INJECTION]: The instructions include defensive patterns to prevent accidental execution. It mandates two separate user confirmation steps requiring exact phrases ("确认删除清单" and "最终确认执行删除") before any destructive command is revealed or executed.
- [EXTERNAL_DOWNLOADS]: The skill depends on an internal workspace script located at
skills\spec-context\scripts\spec-common.ps1. This is a local file dependency within the agent's environment. - [DATA_EXFILTRATION]: While the skill interacts with a remote git server (
git push,git ls-remote), these operations are limited to the specific task of branch management and deletion as requested by the user.
Audit Metadata