setup-openspec
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs a global installation of the
@fission-ai/openspecpackage using the NPM package manager. This downloads and installs code from a third-party registry, which is the stated primary purpose of the skill. - [COMMAND_EXECUTION]: The skill executes shell commands to verify the environment (
node --version), check installation status (npm list), and initialize the project (openspec init). These commands grant the skill the ability to modify the local development environment and run the installed CLI tool.
Audit Metadata