openspec-apply-change
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
openspecCLI to perform operational tasks such as listing available changes, checking workflow status, and retrieving implementation instructions. These are standard functional calls for a tool-integrated agent skill. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection due to its reliance on external data sources.
- Ingestion points: The agent reads and processes files identified in the
contextFilesoutput of the CLI, as well as task descriptions. - Boundary markers: No explicit delimiters or 'ignore' instructions are provided to the agent when processing this external content.
- Capability inventory: The agent can execute CLI commands and write to the local file system to implement code changes.
- Sanitization: The skill lacks explicit sanitization or validation logic for the content of the ingested files.
Audit Metadata