Spec Kitty AI Agent
Spec-Driven Development with organizational governance. Specs tell AI agents what to build; Charter governs how they build it. Git-native missions, enforceable workflows, and consistent engineering standards across AI coding agents and harnesses.
Spec Kitty is an open-source ai agent by spec-kitty, written mainly in Python, with 1,711 GitHub stars and the MIT license. Its code was last updated Nov 1, 2026.
Scan summary: scanned Nov 5, 2026 at commit 9815a18. Seen able to run dynamic code. Scan policy
9815a18 · Nov 5, 2026Findings (164)
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dropper issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.secrets issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
.kittify/overrides/missions/action_index.py:45 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
.kittify/overrides/missions/repository.py:243 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
.kittify/overrides/missions/repository.py:286 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
.kittify/overrides/missions/repository.py:309 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/activation_ledger.py:422 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/catalog.py:245 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/charter_yaml_io.py:618 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/compiler.py:867 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/compiler.py:966 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/compiler.py:1958 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/consistency_check.py:345 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/evidence/corpus_loader.py:45 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/evidence/orchestrator.py:127 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/interview.py:386 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/interview.py:444 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/interview.py:592 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/interview.py:797 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/kind_vocabulary.py:156 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/language_authority.py:402 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/language_vocabulary.py:72 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/org_expected_artifacts.py:112 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/org_pack_discovery.py:447 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/pack_manager.py:435 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/pack_manager.py:748 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/synthesizer/generated_artifact_adapter.py:64 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/synthesizer/provenance.py:89 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/hasher.py:85 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/agent_profiles/repository.py:525 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/agent_profiles/repository.py:1109 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/agent_profiles/validation.py:43 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/drg/loader.py:61 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/drg/project_scan.py:82 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/missions/action_index.py:95 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/missions/repository.py:338 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/missions/repository.py:385 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/missions/repository.py:420 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/packs/builtin_manifest.py:64 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/packs/pack_manifest.py:239 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/spdd_reasons/activation.py:279 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/charter/offering/versioning.py:195 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/glossary/entity_pages.py:85 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/glossary/scope.py:81 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/glossary/scope.py:152 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/glossary/strictness.py:103 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/kernel/schema_utils.py:71 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/kernel/yaml_io.py:76 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/kernel/yaml_io.py:77 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/analysis_report.py:351 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/bulk_edit/occurrence_map.py:217 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/calibration/walker.py:357 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/calibration/walker.py:402 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/charter_pack_synthesizer/provenance.py:95 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/charter_runtime/freshness/computer.py:376 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/charter_runtime/lint/_drg.py:37 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/charter_runtime/lint/checks/org_layer.py:374 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/charter_runtime/preflight/config.py:66 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/cli/commands/_bytecode_doctor.py:126 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/cli/commands/_charter_pack_collect.py:118 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/cli/commands/_charter_pack_collect.py:164 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/cli/commands/agent/tasks_move_task_gates.py:170 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/cli/commands/charter/_status_collectors.py:155 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/cli/commands/glossary.py:804 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/cli/commands/glossary.py:898 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/cli/commands/init.py:862 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/compat/config.py:129 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/compat/registry.py:74 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/config/path_conventions.py:73 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/consolidation/config.py:59 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/context/resolver.py:51 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/contracts/registry.py:187 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/core/agent_config.py:87 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/core/agent_config.py:171 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/core/wps_manifest.py:110 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/doc_analysis/gap_analysis.py:131 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/git/protection_policy.py:385 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/identity/project.py:464 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/identity/project.py:560 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/migration/verdict_provenance_backfill.py:262 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/policy/config.py:135 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/retrospective/gate.py:171 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/retrospective/mode.py:176 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/retrospective/policy.py:295 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/retrospective/policy.py:506 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/retrospective/reader.py:127 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/review/artifacts.py:335 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/review/baseline.py:197 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/review/lock.py:430 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/status/dup_key_repair.py:203 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/tracker/config.py:313 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/tracker/config.py:330 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/tracker/config.py:365 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_0_9_4_roo_deprecation.py:45 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_0_9_4_roo_deprecation.py:163 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_2_0_1_tool_config_key_rename.py:28 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_2_0_1_tool_config_key_rename.py:57 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_3_2_0rc35_activate_builtin_mission_types.py:124 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_3_2_0rc35_activate_builtin_mission_types.py:188 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_3_2_0rc35_strip_selection_config.py:51 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_3_2_0rc35_strip_selection_config.py:105 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_3_2_8_provision_kitty_env.py:218 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_3_2_8_provision_kitty_env.py:229 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_3_3_1_context_sources_consolidation.py:162 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_3_3_1_context_sources_consolidation.py:196 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_4_0_0rc7_pack_level_backfill.py:124 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_unify_charter_activation.py:91 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_unify_charter_activation.py:242 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_unify_charter_activation_finalize.py:199 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/upgrade/migrations/m_unify_charter_activation_finalize.py:209 - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.filelock@3.29.0: 9 known vulnerabilitiesGHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.mcp@1.29.0: 4 known vulnerabilitiesGHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv, GHSA-rwrf-2pqf-9j8j, GHSA-w4fh-qvv9-3v23
uv.lock - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.msgpack@1.2.1: 1 known vulnerabilityGHSA-j586-36cw-2gc2
uv.lock - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Deserializes data with pickle/marshal, which can execute code.
scripts/docs/_inventory.py:65 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Deserializes data with pickle/marshal, which can execute code.
scripts/docs/_inventory.py:157 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Deserializes data with pickle/marshal, which can execute code.
scripts/docs/rename_reconcile.py:122 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Deserializes data with pickle/marshal, which can execute code.
scripts/docs/touched_set_gates.py:137 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Deserializes data with pickle/marshal, which can execute code.
src/charter/activation/synthesizer/fixture_adapter.py:115 - lowLow. Minor, or common in normal tools. Shown for information.In tests/examples/docs: Deserializes data with pickle/marshal, which can execute code.
src/specify_cli/docs/index_model.py:217 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/041-mission-glossary-semantic-integrity/data-model.md:197 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/080-browser-mediated-oauth-cli-auth/contracts/api-ws-token-endpoint.md:51 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/080-browser-mediated-oauth-cli-auth/contracts/oauth-token-endpoint.md:129 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/080-browser-mediated-oauth-cli-auth/data-model.md:312 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/080-browser-mediated-oauth-cli-auth/spec.md:485 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/ci-nightly-interpreter-matrix-45min-timeout-01M3G17F/tasks/WP01-interpreter-matrix-shard-split.md:491 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/ci-nightly-interpreter-matrix-45min-timeout-01M3G17F/plan.md:265 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/cli-boundary-robustness-01M2NQCB/review-evidence/final-provenance-manifest.md:28 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/glossary-seed-file-schema-validation-01KSN752/tasks/WP03-runtime-integration.md:53 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/isolated-home-pin-guard-r1a-01KZNMA3/tasks/WP05-frozen-census/review-cycle-1.md:172 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
docs/reports/test-sanitation/assertive-test-suite-sanitation-01KZME3P/raw/head-census.json:1 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
docs/reports/test-sanitation/assertive-test-suite-sanitation-01KZME3P/raw/base-census.json:1 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
kitty-specs/upgrade-preview-mission-health-01M1V6E1/reviews/ops-review.md:264 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key6 matches in this file
tests/architectural/_interpreter_shard_roster.py:201 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/architectural/spec_kitty_home_pin_baseline.yaml:4 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/architectural/test_performance_marker_guard.py:783 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: jwt
tests/migration/test_mission_state_repair.py:987 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
tests/migration/test_mission_state_repair.py:983 - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key3 matches in this file
tests/specify_cli/context/test_models.py:162 - lowLow. Minor, or common in normal tools. Shown for information.glob@10.5.0: 1 known vulnerabilityGHSA-3g3m-2fjr-6pw4
site/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.47: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
site/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@9.0.9: 1 known vulnerabilityGHSA-g3hv-75wg-m249
site/pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Spec Kitty alternatives
View more →Similar ai agents in Productivity & Workflow, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Spec Kitty (this page) spec-kitty | 1.7k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Paperclip paperclipai | 110k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Ppt Master hugohe3 | 72k | MIT | Oct 30, 2026 | Scanned, no flagged issues |
| Llama Index run-llama | 53k | MIT | Oct 26, 2026 | Scanned, see report |
| Nanobot HKUDS | 50k | MIT | Oct 31, 2026 | Scanned, no flagged issues |
| Sim simstudioai | 30k | Apache-2.0 | Nov 1, 2026 | Scanned, see report |