speckit-install

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow runs uv tool install specify-cli --from git+https://github.com/github/spec-kit.git (and optionally uvx --from git+...), which fetches and ingests outsider-authored repository content from a public Git URL into the environment/tooling that the agent uses (public web content / third-party repo at runtime).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs remote install commands that fetch and execute code at runtime — notably "uv tool install ... --from git+https://github.com/github/spec-kit.git" and the suggested "curl -LsSf https://astral.sh/uv/install.sh | sh" — so it depends on external content that will be executed.