setup-speckit

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the Spec-Kit toolset components from the author's repository (fellowship-dev/spec-kit) or the upstream repository (github/spec-kit) using the git clone command.
  • [PRIVILEGE_ESCALATION]: Grants execution permissions (chmod +x) to the Bash scripts downloaded from the external repository during the setup process.
  • [COMMAND_EXECUTION]: Executes several shell commands including mkdir for project structure, cp for file installation, rm -rf for temporary directory cleanup, and the GitHub CLI (gh) to view repository information and create project-specific labels.
  • [INDIRECT_PROMPT_INJECTION]: The skill installs a framework of slash commands and templates that will ingest external data, such as GitHub issue content, in future development workflows.
  • Ingestion points: Commands installed in .claude/commands/ (like speckit.specify) are designed to pull in data using issue numbers.
  • Boundary markers: No specific delimiters or boundary instructions are included in the installation scripts.
  • Capability inventory: The installed toolset relies on Bash scripts that can interact with the filesystem and the GitHub CLI.
  • Sanitization: No explicit sanitization or input validation logic is implemented during the setup phase.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:03 AM