openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from local project files to ground its reasoning in the project's specific context. * Ingestion points: Reads project configuration from
openspec/config.yamland accesses existing artifacts through theopenspecCLI. * Boundary markers: The skill contains explicit instructions to treat the ingested configuration as constraints and not to reproduce the content in responses or new artifacts. * Capability inventory: Uses theopenspecCLI tool via shell to perform metadata management and artifact generation. * Sanitization: The skill processes these project files as standard text-based artifacts without specialized sanitization logic.
Audit Metadata