openspec-update-change
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
openspecCLI for repository management and artifact retrieval. These operations are restricted to theopenspeccommand space via theallowed-toolsconfiguration. - [DATA_EXPOSURE]: File access is limited to the
openspec/directory and planning artifacts identified by the CLI. No access to sensitive system files or credentials was detected. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-created markdown artifacts for reconciliation. Risks are mitigated by the 'human-in-the-loop' requirement for all proposed edits and the strict prohibition against modifying source code.
Audit Metadata