speckit-install

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the uv installation script from Astral's official domain (astral.sh) using a shell pipe (curl | sh).
  • [EXTERNAL_DOWNLOADS]: The skill uses the uv tool to install the specify-cli package directly from the official GitHub repository (github.com/github/spec-kit).
  • [COMMAND_EXECUTION]: The skill guides the user through executing various CLI commands, including uv, specify, and sh, to facilitate installation, updates, and environment verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 07:12 AM