openspec-ff-change
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the local environment by executing the
openspeccommand-line interface. It uses commands such asopenspec new change,openspec status, andopenspec instructionsto manage the lifecycle of project artifacts. These operations are limited to the scope of the OpenSpec project directory. - [DATA_EXPOSURE]: The skill reads structured JSON data generated by the OpenSpec CLI and processes local artifact files. It does not attempt to access sensitive system files, environment variables, or user credentials.
- [PROMPT_INJECTION]: The instructions contain clear logic for artifact generation and do not include any patterns intended to bypass AI safety guardrails or override system prompts.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any network requests, external downloads, or remote code execution. All operations are performed locally using the pre-installed OpenSpec CLI tool.
Audit Metadata