openspec-explore
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data to provide context-aware analysis, which represents a potential injection surface for untrusted codebase content.
- Ingestion points: Reads project context from
openspec/config.yamland accesses existing change artifacts. - Boundary markers: Includes instructions to treat external data as constraints rather than content to be reproduced.
- Capability inventory: Uses the
openspecCLI to manage artifacts and query repository status. - Sanitization: Relies on LLM reasoning to distinguish between exploration instructions and project data.
- [DYNAMIC_EXECUTION]: The workflow relies on following instructions and templates provided dynamically by the
openspecCLI tool. - The agent executes
openspec instructionsand applies the resulting templates to generate design documents. - Process logic allows for delegation to other specialized tools or skills as defined by the CLI's output metadata.
Audit Metadata