openspec-install
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the OpenSpec CLI from the public npm registry and the Fission-AI GitHub repository.
- [COMMAND_EXECUTION]: The skill executes package manager commands (npm, pnpm, yarn, bun, and nix) to install the CLI globally on the system.
- [REMOTE_CODE_EXECUTION]: The skill uses
nix runto execute code directly from the Fission-AI/OpenSpec GitHub repository, which is a standard method for Nix-based software execution.
Audit Metadata