openspec-explore

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from local project files to ground its reasoning in the project's specific context. * Ingestion points: Reads project configuration from openspec/config.yaml and accesses existing artifacts through the openspec CLI. * Boundary markers: The skill contains explicit instructions to treat the ingested configuration as constraints and not to reproduce the content in responses or new artifacts. * Capability inventory: Uses the openspec CLI tool via shell to perform metadata management and artifact generation. * Sanitization: The skill processes these project files as standard text-based artifacts without specialized sanitization logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 07:49 AM