Security audit
Security checks across malware telemetry and agentic risk
This SDLC automation skill is mostly purpose-aligned, but it needs Review because installation and helper commands can alter the local environment and run commands with broader authority than the top-level skill disclosure makes clear.
Install only if you are comfortable with a development automation tool that can modify repositories, create commits and merges, run local hook executables, install Python dependencies, and place a `spex` command in `~/.local/bin`. Prefer running `spex init --dry-run` first, use `--skip-deps` if you want to manage dependencies yourself, inspect `.spex/hooks/` before workflows, avoid untrusted `PAGER` values, and do not enable debug logging around secrets or proprietary output.
Raises subprocess.CalledProcessError on failure.
"""
branch_name = _strip_refs_prefix(branch_name)
subprocess.run(
["git", "switch", "-c", branch_name],
capture_output=True,
text=True,def switch_branch(branch_name: str, cwd: str | Path | None = None) -> None:
"""Switch to the given branch. Raises subprocess.CalledProcessError on failure."""
branch_name = _strip_refs_prefix(branch_name)
subprocess.run(
["git", "switch", branch_name],
capture_output=True,
text=True,) -> None:
"""Set the git branch description. Branch must be short format (no refs/heads/)."""
branch = _strip_refs_prefix(branch)
subprocess.run(
["git", "config", f"branch.{branch}.description", description],
capture_output=True,
text=True,target: str, source: str, cwd: str | Path | None = None,
) -> None:
"""Merge source branch into target. Raises CalledProcessError on conflict."""
subprocess.run(
["git", "switch", target],
capture_output=True,
text=True,check=True,
cwd=cwd,
)
subprocess.run(
["git",
"-c", "merge.branchdesc=true",
"-c", "merge.log=true",return None
payload = json.dumps(event_data)
result = subprocess.run(
[str(hook_path)],
input=payload,
capture_output=True,path: Path string of the working directory.
command: Shell command string to execute.
"""
result = subprocess.run(command, shell=True, cwd=path)
sys.exit(result.returncode)return
pager = os.environ.get("PAGER", "less -R")
try:
proc = subprocess.Popen(pager, shell=True, stdin=subprocess.PIPE)
proc.communicate(input=text.encode())
except (BrokenPipeError, OSError):
print(text)return
pager = os.environ.get("PAGER", "less -R")
try:
proc = subprocess.Popen(pager, shell=True, stdin=subprocess.PIPE)
proc.communicate(input=text.encode())
except (BrokenPipeError, OSError):
print(text)VirusTotal findings are pending for this skill version.
No suspicious patterns detected.