openspec-apply-change
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
openspecCLI commands (openspec list,openspec status,openspec instructions) to manage project state. These are standard operations for a development tool and utilize user-provided change names within the project scope. - [DATA_EXPOSURE]: The skill reads local project files listed in the
contextFilesoutput of the CLI. This is a core feature of the skill to understand the implementation requirements (specs, designs, tasks). - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local project files (e.g., proposal, specs, tasks) which could theoretically contain malicious instructions. However, the skill treats these as context for code implementation tasks and includes guardrails to pause and ask the user if tasks are ambiguous or reveal issues, reducing the risk of unintended behavior.
Audit Metadata