Skills
Navigate
skills/microck/ordinary-claude-skills/spec-kit-skill/Gen Agent Trust Hub

spec-kit-skill

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the specify-cli tool using the uv manager from the official github.com/github/spec-kit.git repository, which is a trusted source.
  • [COMMAND_EXECUTION]: The workflow relies on executing local bash scripts situated in the .specify/scripts/bash/ directory and the specify CLI tool to perform project tasks and state detection.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-generated technical documents, creating an indirect injection surface. Ingestion points: Reads constitution.md, spec.md, plan.md, and tasks.md from the .specify/ directory. Boundary markers: The skill uses specific markdown headers and directory structures as boundaries but lacks explicit 'ignore instructions' markers for user-provided text. Capability inventory: The skill has the ability to execute shell scripts and perform file system operations. Sanitization: No explicit sanitization of input data is defined before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 01:22 PM