speckit-initial
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run the
specify initcommand. This command is used to bootstrap the project structure, including the.specify/directory, templates, and AI agent-specific slash commands. - [EXTERNAL_DOWNLOADS]: The initialization process involves fetching configuration, templates, and scripts from the official
github/spec-kitrepository. As this is a well-known service and organization, the reference is documented as a standard functional requirement. - [CREDENTIALS_UNSAFE]: The documentation mentions the use of a
GITHUB_TOKENfor accessing private repositories or managing rate limits. The skill provides instructions on how to provide this token via environment variables or command-line flags, which is a standard and secure practice for CLI authentication.
Audit Metadata