openspec-propose
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
openspecCLI tool to perform its operations, including listing stores, creating changes, and checking status. The execution environment is restricted to theopenspectool as specified in theallowed-toolsfrontmatter. - [DYNAMIC_EXECUTION]: The skill includes logic to delegate artifact creation to other commands or skills if specified in the
instructionfield returned by theopenspecCLI. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CLI outputs that could contain instructions.
- Ingestion points: The
instruction,context, andrulesfields provided by theopenspec instructionscommand output inSKILL.md. - Boundary markers: The skill instructs the agent to treat
contextandrulesas constraints and specifically not to copy them into the final output files. - Capability inventory: The skill has the capability to execute
openspeccommands and write files to the local filesystem at paths determined by the tool. - Sanitization: No explicit sanitization of the instruction content is performed before the agent processes it.
Audit Metadata