Skills
Navigate
skills/fengshao1227/ccg-workflow/openspec-onboard/Gen Agent Trust Hub

openspec-onboard

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local commands using the openspec CLI and git to manage workflow artifacts and analyze project history. These operations are consistent with the tool's intended use for development workflows.
  • [INDIRECT_PROMPT_INJECTION]: The skill scans the codebase for TODO or FIXME comments to suggest tasks. 1. Ingestion points: Local codebase files searched in Phase 2. 2. Boundary markers: None present. 3. Capability inventory: Execution of openspec CLI commands and file system writes. 4. Sanitization: Relies on AI-generated task names and explicit user selection before proceeding.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 01:57 PM