setup-speckit
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the Spec-Kit toolset components from the author's repository (fellowship-dev/spec-kit) or the upstream repository (github/spec-kit) using the
git clonecommand. - [PRIVILEGE_ESCALATION]: Grants execution permissions (
chmod +x) to the Bash scripts downloaded from the external repository during the setup process. - [COMMAND_EXECUTION]: Executes several shell commands including
mkdirfor project structure,cpfor file installation,rm -rffor temporary directory cleanup, and the GitHub CLI (gh) to view repository information and create project-specific labels. - [INDIRECT_PROMPT_INJECTION]: The skill installs a framework of slash commands and templates that will ingest external data, such as GitHub issue content, in future development workflows.
- Ingestion points: Commands installed in
.claude/commands/(likespeckit.specify) are designed to pull in data using issue numbers. - Boundary markers: No specific delimiters or boundary instructions are included in the installation scripts.
- Capability inventory: The installed toolset relies on Bash scripts that can interact with the filesystem and the GitHub CLI.
- Sanitization: No explicit sanitization or input validation logic is implemented during the setup phase.
Audit Metadata