cmd-speckit-init-update

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly clones and copies files from the public GitHub repository https://github.com/github/spec-kit.git (steps 2–3), causing the agent to fetch and ingest untrusted third-party content from GitHub which can alter scripts/templates that materially affect later agent behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill performs a runtime git clone of https://github.com/github/spec-kit.git to fetch and update .specify/ templates (e.g., agent-file-template.md) and bash scripts (e.g., update-agent-context.sh), which can directly control agent prompts/instructions and introduce executable code.