openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the openspec CLI via Bash to perform operations such as listing changes, checking project status, and retrieving instructions for artifact creation. Tool access is scoped to the openspec binary namespace in the skill configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and analyze project files, including source code and configuration files, to provide context-aware suggestions. This creates a potential surface for indirect prompt injection if those files contain malicious instructions.
- Ingestion points: Local codebase files, openspec/config.yaml, and existing OpenSpec markdown artifacts.
- Boundary markers: No specific delimiters or safety warnings for external data processing are defined in the instructions.
- Capability inventory: Execution of openspec CLI subcommands for status, listing, and artifact management.
- Sanitization: The skill does not define specific sanitization or filtering logic for the content it reads from the filesystem before processing it.
Audit Metadata