openspec-apply-change
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
openspecCLI to automate workflow tasks. It runs commands likeopenspec statusandopenspec instructionsto manage state. These are standard operations for this tool's intended use case.\n- [INDIRECT_PROMPT_INJECTION]: The skill readscontextandoperationGuidancefrom external CLI output, which acts as a potential surface for indirect instructions.\n - Ingestion points: Data returned by
openspec instructions apply --jsonas described inSKILL.md.\n - Boundary markers: The instructions include specific guardrails requiring the agent to prioritize built-in workflow logic and report any conflicts found in the external guidance.\n
- Capability inventory: The agent can read project context files and execute commands within the
openspectool scope.\n - Sanitization: The skill mandates a logical review process where external guidance is evaluated against known project facts and constraints before being followed.
Audit Metadata