speckit-cli-setup

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION

Full Analysis

[EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the specify-cli package from PyPI using standard installers (uv and pipx).
[REMOTE_CODE_EXECUTION]: The skill includes the official installation command for the uv tool (curl -LsSf https://astral.sh/uv/install.sh | sh). This refers to a well-known service (Astral) and is presented as a manual instruction for the user to follow if the tool is missing, rather than a silent background execution.

Audit Metadata

Risk Level

SAFE

Analyzed

Sep 4, 2026, 11:49 PM

Security Audit — agent-trust-hub — speckit-cli-setup