openspec-reflect
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool to rungit statusandgit diff --statfor calculating scope deviation. It also references project-specific commands likeopenspec showandopenspec statusas noted inreference.md. These actions are standard for development workflows and consistent with the skill's purpose.\n- [PROMPT_INJECTION]: The skill processes untrusted project documentation, which creates a surface for indirect prompt injection.\n - Ingestion points: Reads content from
proposal.md,tasks.md, andspecs/*.md(defined inSKILL.md).\n - Boundary markers: No explicit delimiters or instruction-ignoring warnings are used when processing file content.\n
- Capability inventory: The skill has access to
Editfor file modifications andBashfor command execution.\n - Sanitization: No validation or filtering of external content is documented prior to processing.
Audit Metadata