spec-kit-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the optional installation of
specify-clifrom an official GitHub repository (github.com/github/spec-kit). The documentation includes safety guardrails, explicitly instructing the agent not to install the package or mutate global state without direct user approval. The source belongs to a well-known organization. - [INDIRECT_PROMPT_INJECTION]: The workflow relies on processing local project files which could theoretically contain instructions intended to influence agent behavior.
- Ingestion points: Specification artifacts located in
.specify/andspecs/directories as described inSKILL.md. - Boundary markers: None explicitly defined for the ingested Markdown files.
- Capability inventory: The skill supports implementation tasks that typically involve file modifications and command execution through the agent's standard toolset.
- Sanitization: The skill does not define specific sanitization routines for the content of the spec files, relying on the gated review process (clarify/analyze) for validation.
Audit Metadata