openspec-explore

Pass

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Executes the openspec list --json command to retrieve the current state and list of changes in the project environment.
  • [DATA_EXFILTRATION]: Reads local codebase files and OpenSpec artifacts such as proposals and designs to provide context for discussions. No network activity or external data transmission was identified.
  • [PROMPT_INJECTION]: Contains internal behavioral constraints that prevent the agent from writing application code while in explore mode, which acts as a safety measure for the intended use case.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 4, 2026, 08:44 AM
Security Audit — agent-trust-hub — openspec-explore