openspec-verify-change
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the
openspecCLI using a restricted Bash tool configuration (Bash(openspec:*)). These commands are used to retrieve change statuses and artifact paths from the local environment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local artifact files (tasks, specifications, and design documents) to verify implementation status. It uses structured parsing (e.g., checking markdown checkboxes and header patterns) to analyze this content, which is a standard and safe operation for development analysis tools.
Audit Metadata