openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the local project environment, creating a vulnerability surface where malicious content in files could influence agent behavior.\n
- Ingestion points: The skill reads project configuration files (openspec/config.yaml or config.yml) and various codebase artifacts to gather context for its analysis.\n
- Boundary markers: There are no explicit instructions or delimiters defined to help the agent distinguish between its own logic and potentially malicious instructions embedded in the files it reads.\n
- Capability inventory: The skill is authorized to use the openspec CLI tool and perform file read operations across the project.\n
- Sanitization: No sanitization, validation, or filtering mechanisms are described for the content retrieved from the codebase or configuration files.
Audit Metadata