speckit-initial

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to run the specify init command. This command is used to bootstrap the project structure, including the .specify/ directory, templates, and AI agent-specific slash commands.
  • [EXTERNAL_DOWNLOADS]: The initialization process involves fetching configuration, templates, and scripts from the official github/spec-kit repository. As this is a well-known service and organization, the reference is documented as a standard functional requirement.
  • [CREDENTIALS_UNSAFE]: The documentation mentions the use of a GITHUB_TOKEN for accessing private repositories or managing rate limits. The skill provides instructions on how to provide this token via environment variables or command-line flags, which is a standard and secure practice for CLI authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 04:11 PM
Security Audit — agent-trust-hub — speckit-initial