speckit-preset
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading and installing presets from remote ZIP URLs via
specify preset add --from <url>. It also allows adding remote catalogs usingspecify preset catalog add <url>. These features enable the retrieval of external content into the local execution environment from arbitrary sources.\n- [INDIRECT_PROMPT_INJECTION]: The skill handles external presets that bundle templates and configuration, creating a surface for indirect prompt injection.\n - Ingestion points: Data enters the agent's scope via the
specify preset addandspecify preset catalog addcommands defined inSKILL.md.\n - Boundary markers: No explicit boundary markers or 'ignore embedded instructions' warnings are provided for the content of the presets.\n
- Capability inventory: The skill facilitates command execution through the Specify CLI and file system modification through the installation of presets.\n
- Sanitization: There is no evidence of validation or sanitization of the remote content, although the skill warns that
--install-allowedshould only be used for trusted catalogs.
Audit Metadata