openspec-ff

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied descriptions and existing planning artifacts to generate technical designs and implementation tasks, creating a surface for indirect prompt injection.
  • Ingestion points: The workflow reads data from proposal.md and specs/**/*.md to inform the creation of design.md and tasks.md as described in SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters or specific instructions to ignore potential commands embedded within the source artifacts.
  • Capability inventory: The skill is authorized to perform file system write operations within the openspec/changes/ directory to create multiple markdown artifacts.
  • Sanitization: The provided skill instructions do not mention sanitization or validation of the input content before it is interpolated into the generation process.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 08:19 AM