speckit-install

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow runs uv tool install specify-cli --from git+https://github.com/github/spec-kit.git (and optionally uvx --from git+...), which fetches and ingests outsider-authored repository content from a public Git URL into the environment/tooling that the agent uses (public web content / third-party repo at runtime).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly runs remote install commands that fetch and execute code at runtime — notably "uv tool install ... --from git+https://github.com/github/spec-kit.git" and the suggested "curl -LsSf https://astral.sh/uv/install.sh | sh" — so it depends on external content that will be executed.

MEDIUM W021: Hidden or invisible Unicode characters detected (potential obfuscation or prompt injection).

• Hidden Unicode characters detected (1 type(s) found)