speckit-install
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the
uvinstallation script from Astral's official domain (astral.sh) using a shell pipe (curl | sh). - [EXTERNAL_DOWNLOADS]: The skill uses the
uvtool to install thespecify-clipackage directly from the official GitHub repository (github.com/github/spec-kit). - [COMMAND_EXECUTION]: The skill guides the user through executing various CLI commands, including
uv,specify, andsh, to facilitate installation, updates, and environment verification.
Audit Metadata