openspec-install

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the global installation of the OpenSpec CLI by providing commands for npm, pnpm, yarn, bun, and nix. These are standard administrative actions for developer tools.
  • [EXTERNAL_DOWNLOADS]: The skill downloads the OpenSpec package from the official npm registry under the scoped name @fission-ai/openspec and from the official GitHub repository Fission-AI/OpenSpec for Nix-based installations. These sources are consistent with the tool's documentation and the skill's stated purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 08:19 AM