speckit-install

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the installation script for the uv tool from Astral's official domain (astral.sh).
  • [REMOTE_CODE_EXECUTION]: Executes the uv installation script by piping it directly to the system shell (sh).
  • [EXTERNAL_DOWNLOADS]: Downloads and installs the specify-cli package from the official GitHub repository for Spec Kit (github/spec-kit).
  • [COMMAND_EXECUTION]: Utilizes uv tool install and uvx commands to install and manage the Specify CLI binary on the host system.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 10:48 AM