speckit-install
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: Provides instructions to download and execute the official
uvinstallation script from Astral's domain (astral.sh) using a pipe to the shell. - [EXTERNAL_DOWNLOADS]: Installs the
specify-clitool directly from the official repository hosted on GitHub (github.com/github/spec-kit).
Audit Metadata