openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates the
openspecCLI to manage project metadata and documentation. It guides the agent to use subcommands such asstatus,new change, andinstructionswhile incorporating context-specific identifiers like change names and store IDs. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the local repository, including
openspec/config.yamland various markdown artifacts (e.g.,spec.md,design.md). - Ingestion points: Reads files from the
openspec/root and artifact paths identified by the CLI. - Boundary markers: Explicitly instructs the agent to treat these files as constraints and prohibits copying their content into the conversation or new artifacts.
- Capability inventory: Limited to
openspecCLI subcommands viaallowed-tools; the skill contains a specific guardrail prohibiting the implementation of application code. - Sanitization: Relies on the underlying CLI and the platform's tool restrictions for safe handling of project data.
Audit Metadata