openspec-apply-change
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands using the
openspecCLI (e.g.,openspec list,openspec status, andopenspec instructions). These are standard operational commands for the tool's intended purpose and do not involve shell injection or unsafe argument handling as they primarily use change names inferred from context or user input for specific, limited tasks. - [SAFE]: No obfuscation, data exfiltration, or persistence mechanisms were detected. The skill follows best practices by instructing the agent to pause on ambiguity and maintain minimal, scoped code changes. Instructions to read local context files and update task checkboxes are within the expected scope of a development aid tool.
Audit Metadata