openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from the local codebase and OpenSpec configuration files to ground its suggestions and capture decisions.
- Ingestion points: The skill reads local files, codebase search results, and configuration files such as
config.yamlto establish context. - Boundary markers: There are no instructions to use delimiters or ignore instructions that may be present within the codebase files.
- Capability inventory: The skill can execute various
openspecCLI commands and write data to the filesystem. - Sanitization: No sanitization of the content retrieved from the files is mentioned before the agent uses it for reasoning.
- [COMMAND_EXECUTION]: The skill relies on executing the
openspecCLI to manage project state, changes, and artifacts. - Evidence: Several commands are invoked, including
openspec store list,openspec list,openspec new change,openspec status, andopenspec instructions. - [DYNAMIC_EXECUTION]: The skill follows instructions from the
openspectool that may delegate tasks to other commands or skills. - Evidence: The instructions specify that if the
openspec instructionscommand output delegates creation to a specific skill or command, the agent should proceed with that invocation.
Audit Metadata