openspace
Warn
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation script clones the OpenSpace repository from
https://github.com/HKUDS/OpenSpace.git, which is an external third-party source not associated with the skill author. - [COMMAND_EXECUTION]: The skill includes scripts (
install-openspace.sh) that perform broad system operations including directory creation, virtual environment setup, and package installation across the user's home directory. - [COMMAND_EXECUTION]: The
register-openspace-mcp.shscript systematically modifies configuration files for a wide variety of AI runtimes (including Claude, Cursor, Codex, Gemini, Grok, and others) located in the user's home directory to register the OpenSpace MCP server. - [REMOTE_CODE_EXECUTION]: The installer executes
pip install -e .on the cloned repository, a process that can trigger the execution of arbitrary code defined in the package's setup configuration during installation. - [COMMAND_EXECUTION]: The configuration script embeds and executes a Python block to perform complex JSON and TOML modifications across multiple different runtime environments, handling environment variables and tool paths.
Audit Metadata